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A Beowulf Cluster is a type of apportioned parallel 
processing system, which consists of a collection of reticulated 
standalone computers working together as a single integrated 
computing resource generally having a single system image (SSI), 
that is the users generally view the clusters as a single system. 

The relatively low cost of two commodity components which 
are the fast CPUs designed primarily for the personal computer 
and networks designed to connect personal computers together 
(in local area network or LAN) makes full advantage of the use of 
Beowulf Cluster, in this paper we benefit from these components 
to build larger system. 

The model was implemented in this paper is using the message 
passing interface technique developed in C language and use 
Linux operating system and the goal is to build Beowulf cluster to 
solve large mathematic operation faster as an example for matrix 
multiplication and PI problem ...etc. the same approach can be 
used in scientific applications that need supercomputing power or 
in various other areas like databases, multimedia, web services, 
etc. In addition the users can access any node of the cluster and 
use it independently as a local personal computer. 

Keywords — parallel processing system ; Network; Networking 
and Systems; Linux. 



I. 



Introduction (Heading 1 ) 



The increasing need of computing power ,and the high cost 
of supercomputers and their low accessibility have all led us to 
the research in clusters that are providing services similar to 
supercomputers at a low cost. Clustering has come a long time 
ago since the beginnings of the 1960s with the advent of high 
capability of the microprocessors and high speed networks. 
This has gained further momentum with the development of 
standard tools for high performance distributed computing. 
Clusters give us the advantage of using low cost PCs over a 
network that provides us a cost effective form of parallel 
computing. This Concept has led research institutions in 
discussing the possibility of sharing computing resources and 



the ability to meet the needs is a major consideration towards 
developing new systems. Based on this knowledge and 
experience, HPC with Linux clusters are considered in order to 
build a parallel computing system that will act as core role in 
the next-generation systems for supercomputer. To achieve that 
we used "Beowulf Cluster". [1] 

A Beowulf Cluster is a kind of supercomputers. More 
specifically, is an apportioned parallel computer built from 
commodity components. This approach takes advantage of the 
astounding performance now available in commodity personal 
computers. By many measures, including computational speed, 
size of main memory, available disk space and bandwidth, a 
single PC of today is more powerful than the supercomputers 
of the past. By harnessing the power of tens to thousands of 
such low cost but powerful processing elements, you can create 
a powerful supercomputer. 

a computer cluster consists of a set of loosely connected 
computers that work together so that in many respects they can 
be viewed as a single system. Clusters are usually deployed to 
improve performance and/or availability over that single 
computer, while typically being much more cost-effective than 
single super computers of comparable speed or availability. A 
cluster is a group of linked devices (computer or embedded 
devices), working together closely so that they form a single 
node virtually. The components of a cluster are generally, but 
not always, connected to each other through wireless or wired 
(Ethernet) that allows data to move between the nodes. Nodes 
come in many types but are usually built from processors 
designed for the PC. If a node contains more than one 
processor, it is called an SMP (Symmetric Multiprocessor) 
node. [2] 

The main purpose of a Beowulf cluster is to perform 
parallel computations for solving large mathematical operations 
very fast. This is accomplished by running applications across 
many nodes simultaneously. These applications may perform 
in parallel; that is, they may need to coordinate during 
execution. On the other hand, they may be performing an 
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embarrassingly parallel task, or a large group of serial tasks. 
The main key factor in application performance in all cases is 
local node performance. 

The PXE (Pre-execution environment) is a protocol by 
which nodes can boot the system based on a network-provided 
configuration and boot image. The system is implemented as a 
combination of two common network services. First, a node 
will DHCP (Dynamic Host Configuration Protocol) for an 
address. The DHCP server will return an offer and lease with 
extra PXE data. This extra data contains an IP address of a 
TFTP server (Trivial File Transfer Protocol), a boot image 
filename (that is served from the server), and an extra 
configuration string that is passed to the boot image. Most new 
machines support this, and accordingly many cluster 
management software systems use this feature for installations. 
This feature is implemented by the BIOS in motherboards with 
integrated Ethernet controllers, and in the on-card device 
initialization code on add-on Ethernet controllers. 

n. Reasons to use cluster 

Cluster is used instead of a single computer for many 
reasons, the main reasons: performance. But the original reason 
for the development of Beowulf clusters was to provide cost- 
effective computing power for scientific applications, that is, to 
address the needs of applications that required greater 
performance than was available from single (commodity) 
processors or affordable multiprocessors. An application may 
desire more computational power for many reasons, but the 
following three reasons are the most common[3]: 

A. The need for Real-time constraints 

That is, a requirement that the computation finish within a 
certain period of time. Weather forecasting is an example. 
Another is processing data produced by an experiment; the data 
must be processed (or stored) at least as fast as it is produced. 

B. Increase of Throughput 

A scientific or engineering simulation may require large 
number of computations. A cluster can provide the resources to 
process many related simulations. On the other hand, some 
single simulations require so much computing power that a 
single processor would require days or even years to complete 
the calculation. 

C. Memory capacty 

Some of the most challenging applications require huge 
amounts of data as part of the simulation. A cluster provides an 
effective way to provide even terabytes (1012 bytes or one 
million megabytes) of program memory for an application 

Another important reason for using clusters is to provide 
fault tolerance, that is, to ensure that computational power is 
always available. Because clusters are assembled from many 
copies of the same or similar components, the failure of a 
single part only reduces the cluster's power. Thus, clusters are 
particularly good choices for environments that require 
guarantees of available processing power, such as Web servers 
and systems used for data accumulation. Galan et al. [4] 
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recognized three common hardware structure for parallel 
computing: shared memory machines that communicate 
through memory sustained on dedicated hardware and 
characterize with a very high bandwidth between memory and 
CPU; local memory device that communicate through networks 
of workstations and clusters; and local memory device that 
integrate in a loosely knit collaborative network. In these 
categories, Beowulf cluster falls into a local memory devices 
by messages through networks of workstations and clusters and 
each workstation maintains its individuality. 

Clusters provide the computational power through the 
use of parallel programming, a technique for coordinating the 
use of many processors for a single problem [5]. 

III. IMPORTANT ASPECT AND COMPONENT IN CLUSTERING 

There are many independent elements (component) that 
work together to create a cluster system the selection of 
operating system, networking, and security aspect. Here is the 
view of important aspect and component in clustering 

A. Using Linux for a Beowulf 

Probably the most important reason for using Linux to 
build a Beowulf is its adaptability and flexibility. Because 
Linux is open source, it can easily be modified, rearranged, and 
tweaked for whatever the task needed. 

Some individuals may get pale at the idea of 
modifying the operating system, but never fear, Linux is 
actually very friendly. Because of the distributed development 
environment that has helped it become so successful, it is also 
easily modified and tweaked. 

Linux support many types of processors. Intel, Alpha, 
IA32, IA64, and many others. You can choose to build your 
Beowulf from the fastest Intel core 17 server. Beside that Linux 
operating system is very small, In fact Linux can easily be 
compiled to use as little as 600 Kbytes of compressed disk 
space on a floppy so it can fit on embedded devices. And as we 
know small kernel is a kernel that is more likely to be stable. 

B. Network Booting 

Because of Linux flexibility, there are many options 
can be used to build a cluster. While most clusters are built 
using a local storage drive for booting the operating system, it 
is not really required. Network booting allow the kernel to be 
loaded from a network server. A specialized network adapters 
or system BIOS is required. Most companies are offering 
network boot-capable machines in their high-end servers. The 
most common standard is the Intel PXE 2.0 net booting 
mechanism. On such machines, the firmware boot code will 
request a network address and kernel from a network attached 
server, and then receive the kernel using TFTP. 

C. Diskless Operation 

Some applications and environments can work very 
well without the cost or management overhead of a hard drive. 
In some environments, operating system kernels and 
distributions may need to be switched frequently, or even 
between runs of an application. Reinstalling the operating 
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system on each compute node to switch over the system is 
generally difficult, as would maintaining multiple hard disk 
partitions with different operating systems or configurations. In 
such cases, building the Beowulf without the operating system 
on the local hard drive, if it even exists, can be a good solution. 
Diskless operation also has the added benefit of making it 
possible to maintain only one operating system image, rather 
than having to propagate changes across the system to all of the 
Beowulf nodes. 

D. Secure shell 

SSH allows for encrypted communication to and from 
the master node. The SSH daemon is the secure replacement of 
RLOGIN (remote login), RSH (Remote Shell) and Telnet 
(Telnet is a network protocol used on the Internet or local area 
networks to provide a bidirectional interactive text-oriented 
communications). The OpenSSH package is not installed 
automatically with Ubuntu, which means the SSH remote 
access clients like SSH (Secure shell) and SCP (Secure Copy) 
are not available to users immediately. The SSH service should 
be downloaded. 

Once SSH has been downloaded the root user should 
be able to remotely access any of the nodes in the cluster. This 
ability can be tremendously useful when one needs to replicate 
configuration files across several nodes of the cluster or to 
restart a service without being at the console of the specific 
node. 

E. Parallel Programming with MPI 

Message Passing Interface (MPI) is an application 
program interface speciation that allows processes to 
communicate with one another by sending and receiving 
messages between them. It is typically used for parallel 
programs running on supercomputers, where the cost of 
accessing non-local memory is high [6]. The processes have 
separate address spaces they communicate by sending and 
receiving messages. Each process would be running on a 
separate node. MPI is also supporting shared memory 
programming model. This means that multiple processes can 
read or write to the same memory location. 

Sometimes normal program can be used by all the 
processes, but with distinct parameters. In this case, no 
communication occurs among the separate tasks. When the 
strength of a parallel computer is needed to attack a large 
problem with a very complex structure, however, such 
communication is necessary [7]. 

F. Measuring MPI Performance 

There are many tools have been developed for 
performance measuring like MPPTEST program and The 
SKaMPI test suite. To get best test results is always obtained of 
own application, but a number of tests are available that can 
give a general overview of the performance of MPI on a 
cluster. 



G. Hardware Considerations 

Building a cluster, access to computers on which to 
install the software is essential. Therefore, it makes sense to 
cover this early in the process. 

For sure it is necessary to have at least two computer 
machines when building a cluster. It is not essential that these 
machines have the same levels of performance and 
specifications. The only main requirement is that they both 
share identical architecture. For instance, the cluster should 
only consist of all Intel machines or all Apple machines but not 
a mixture of the two. In theory it is possible to mix 
architectures when building a cluster by using Java, but that is 
outside the scope of this paper. 

Strictly speaking, the only hardware requirements 
when building a cluster is two computers and some type of 
networking hardware to connect them with. 

1. Clusters specification 

To get full benefits of a cluster, the right hardware 
must be used. For optimal performance, all nodes except the 
master node should have same hardware specifications. This is 
because the fact that one node which takes longer to do its 
work can slow the entire cluster down as the rest of the nodes 
must wait for the slow node to catch up. This is not always the 
case, but it is a consideration that must be made. Having 
identical hardware specs also simplifies the setup process a 
great deal as it will allow each hard drive to be imaged from a 
master instead of configuring each node individually. 

2. The Master Node 

There are four main considerations when building the 
master node. They are Processor speed, Disk speed, Network 
speed, and RAM. 

• Processor Speed 

If the master node is participates in 
computation this will be critical. Many more tasks will 
be handled by master node than the slave nodes so a 
faster processor may be required to keep it from being 
behind others. Not forgetting that since the master 
node can be kept quite busy doling out work to the 
other nodes, a slowdown here can have a huge negative 
effect on the entire cluster as the slave nodes waste 
time waiting for their next instruction. 

• Disk Speed 

As we know, major work is done on the 
cluster ,some time or another it need to be saved as 
files on a hard drive, disk speed for the master node is 
absolutely critical, made even more so due to the fact 
that most nodes make use of NFS (Network File 
System) which means that every node in the cluster 
will be competing for access of the master node's disk. 
A fast SCSI drive is recommended, but an IDE drive 
will work as well. 
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• Network Speed 

This is critical as well. Time spent 
transmitting data is time wasted. The faster the 
network, the better the performance of the cluster. This 
can be mitigated by a good deal if the programmer 
expressly tries to minimize the ratio of time on the 
network to time on the processor but it never hurts to 
have more network speed. Fast Ethernet is 
recommended, Gigabit Ethernet is ideal but basically 
any network speed will work. While not part of the 
master node per se, it is strongly recommended that a 
switch be used instead of a hub when designing the 
cluster network. 

• RAM 

In the master node RAM is crucial for two 
reasons. First, the more RAM, the more processes can 
be run without ingress the disk. Second, the Linux 
kernel can and will cache it's disk writes to memory 
and keep them there until they must be written to disk. 
Both of these raise the speed of the master node which 
is critical to good overall cluster performance. 

3. Slave Nodes 

The slave nodes need to execute two tasks: Perform 
the computations assigned to them and then send that data back 
out over the network. So, their disk performance is not critical. 
In fact, it is normal to have nodes without hard drives in a 
cluster. These diskless nodes reduce the cost of building a 
cluster and eliminate some of the time required to set a cluster 
up. This document, however, assumes that the slave nodes will 
have no hard drives DRBL(Diskless Remote Boot in Linux). 

The three most important hardware considerations for 
slave nodes are processor speed, network speed and RAM. 

• Processor Speed 

Nodes primary function is executing mathematical 
tasks, it makes sense that the fastest processor should be used. 
The more processing power the better. Multiple processors for 
the nodes can be desirable but add another degree of 
complexity for programming an applications for the clusters. 
Not only must the programmer take distributed processing into 
consideration, but SMP as well. As of the time of this writing, 
Intel Core I 5's offer a good price/performance ratio. 

• Network Speed 

This affects the slave nodes in exactly the same way 
that it does the master node. See that section above for more 
information. 

• RAM 

This affects the slave nodes in exactly the same way 
that it does the master node. See that section above for more 
information. 



IV . Design the computer cluster 

Designing the Linux cluster model need a collection 
of Personal Computers (PCs) connected in one network 



together as a single resources in order to share their processors 
and other resources for computations and analysis that could be 
performed on any parallel machine. The cluster consists of a 
PC designated as the master while the other PCs on the 
network are the computational nodes as slaves. 

The technology of cluster [8] that is being used is all active, 
that is, there is no primary or backup nodes. The cluster is 
designed from a set of heterogeneous mixture. The systems are 
networked together using a Fast Ethernet architecture of 
100Mbps for data transfer and the cluster is designed in such a 
way that the nodes can access the master node and checks the 
status of the master through network commands issued from 
the node. Users should be able to log on to the master nodes 
through the client nodes. 

The main steps of building the computer cluster is 
described in the following flowchart and this chapter will 
discuss each step alone: 



( Start } 



Hardware 
Considerations 



Installing Linux 



Install 
OpenSSH and DUEL 



Configuring the 
Nodes 



Install 
MPI Package 



Running MPI 
Program 



Flowchart (1) main steps of building the computer cluster. 
• Running MPI Program 
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Figure 1 The client-server paradigm. 
In case of run a program with multiple inputs, a 
parallel client-server implementation might just run multiple 
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copies of the code serially with the server granting the different 
inputs to each client process. As each processor finishes its 
task, it is assigned a new input. Alternately, task parallelism 
can be implemented at a deeper level within the code. 

V . Testing Performance and Results 

The biggest challenge we had to do for the use of a 
Beowulf cluster was the conversion of an existing serial code 
to a parallel code based on the message passing philosophy. 
The main difficulty with the message passing philosophy is 
that we have to ensure that master node is distributing the 
workload equally between all the other nodes. Because all the 
nodes have to synchronize at each time step, each PC should 
finish its task in about the same period of time. If the load is 
uneven or if the load balancing is poor, the PCs are going to 
synchronize on the slowest node, leading to a worst situation. 
Another hitch is the possibility of communication patterns that 
can deadlock. A typical example is if PC A is waiting to 
receive information from PC B, while B is also waiting to 
receive information from A. 
• Calculating Value of Pi 

A program to calculate the accurate value of mathematical 
constant PI (3.14) was evaluated for elapsed time and error in 
the calculated value. The benchmark value of PI was 
considered up to 25 decimal places whereas cluster computed 
the value up to 16 decimal places. Hence the error could be 
identified for 9 decimal places in accuracy as compared to the 
benchmark value using 25 decimal places. The error was 
observed to show very minor change which negligible and 
hence we focused mainly on the execution time of the 
program. Extensive use of machine file was made for 
submitting the processes. 

The processes are allowed to move back and forth the 
master node depending upon the free resources. For example, 
say master node was allowed two processes. When the third 
process is to be scheduled, it will be scheduled on one of the 
slave node. In the meantime the fourth process is also queued 
and also one of the process on master node is terminated. Then 
there is no need to send the fourth process to the slave node, it 
will be executed on the master node itself. 

Hence, processes were allocated dynamically depending 
on the free resources on a node, be it master or a compute 
node. Also note that the empty cells in table indicate that no 
output was obtained due to submission of processes beyond 
capa city of cluster. 



Number 
of 

Processes 


Node = 1 


Node = 3 


Node = 5 


5 


0.001481 


0.001008 


0.001211 


10 


0.001641 


0.003463 


0.00357 


50 


0.047269 


0.108689 


0.11757 


100 


0.115619 


0.252974 


0.2752 


200 




0.55463 


0.584591 


300 




0.98335 


0.993251 


400 




2.901754 


2.925887 


550 






3.102552 



Table 2 Calculation of Value of Pi 
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Xninber of Processes 
Figure 1 Calculation of Value of PI - Analysis 

It can be seen from the graph that as the size of the 
problem increases i.e. the number of process increases the 
number of nodes needs to be increased else the problem 
cannot be solved to success. It was seen that a single node 
was not capable of running processes more than 100 
whereas 5 nodes could run the problem as big as the 550 
processes which is more than 5 times. In a sense the 
capacity of computation was increased by more than 5 
times when running the same task on the cluster as 
compared to single node. Also it was seen that execution 
time of the same problem, on increasing the number of 
nodes, increased negligibly. This increase was because the 
time incurred on process migration which involved the 
process suspension on master node and resume on slave 
node. As the number of processes were increased to few 
hundred the time to break-up the problem and combine it 
for consolidated result was much higher than time incurred 
in migration. With increase in number of nodes the size of 
problem could also increase. 

• Matrix Multiplications 

The matrix operation is multiplying two input 
matrices to produce single matrix as a resultant matrix, 'a' and 
'b', where matrix 'a' is a matrix of N rows by P columns and 
matrix 'b' is of P rows by M columns. The resultant matrix 'c' 
is of N rows by M columns. The serial realization of this 
operation is quite straightforward as listed in the following: 
for(k=0; k<M; k++) 
for(i=0; i<N; 
{ 

for(j=0;j<P;j++) 

c[i][k]+=a[i][j]*b[j][k]; 

1 

The algorithm of matrix multiplication is 
implemented in high performance Beowulf Linux cluster 
using the MPI send-receive paradigm. The server node reads 
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in the input data, which includes the number of slaves to be 
spawned, numtasks. Next , registering with nodes and 
receiving a taskid, then distributes the input graph information 
to each of them. The server obtains the result from each of the 
slaves. Since each slave needs to work on a distinct subset of 
the set of matrix elements, they need to be assigned instance 
IDs in the range (0... numtasks -Y). The source code for serial 
and parallel is shown in Appendix A. 

The matrix multiplication was run with forking of 
different numbers of tasks to demonstrate the speedup. 
Problem sizes were 100*100, 200*200, 300*300, 400*400, 
500*500 and 600*600 in our experiments with one node 
attached to the master node. It is well known, the speedup can 
be defined as Ts/Tp, where Ts is the execution time using 
serial program, and Tp is the execution time using 
multiprocessor. 

The execution times and corresponding speedups by 
using 20 processes with different problem sizes were listed in 
Figure 2. In, the corresponding speedup is increased for 
different problem sizes compared with the same problem size 
executed in serial . 



Time (Sec) 




100*100 200«200 300*300 400*400 500*500 600*600 



Figure 2 Execution times and corresponding speedups by 
using 20 processes compared with serial execution 
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Figure 3 The speedup graph as Ts/Tp. 



I. Conclusion 

Scalable computing clusters are rapidly becoming the 
standard platforms for high performance and large-scale 
computing. It is believed that message-passing programming 
is the most obvious way to help programmer to take advantage 
of clustering symmetric multiprocessors (SMP) parallelism. A 
high performance computing cluster is built using DRBL and 
OpenMPI. The usage of DRBL simplifies the building process 
and maintenance. A hard disk is installed on each client node 
only to provide the local swap space. This cluster with system 
less clients can be one with diskless clients if the memory 
capacity on each clients is large enough. 

It can be observed from the execution of the MPI 
programs that number of nodes in a cluster must be in 
accordance with the target application. Also that a larger 
application needs more number of compute nodes else the 
problem cannot be solved due to shortage on resources. The 
time required for process migration and consolidation of the 
result on the master node increase with increase in number of 
nodes. Thus it can be noted that number of nodes must be 
increased with a care so that performance gain can be 
genuinely achieved. 

The performance test based on the testing codes using 
MPI shows consistent results. It is demonstrated that such a 
high performance computing cluster can be constructed from 
scratch for potential applications on computational physics 
problems. 

As the number of compute nodes in modern HPC 
clusters continues to grow, it is critical to design clusters with 
low power consumption and low failure rate. In particular, it is 
widely known that the internal disk drives of compute nodes 
(in the case of disk full clusters) are a major source of failures. 
In addition, these disk full HPC clusters tend to require more 
power and cooling requirements compared to diskless clusters. 

The advantages of Beowulf Diskless Remote Boot 
computing cluster are evident for any organization that requires 
high computational power. This is, when we take into account 
the performance/price ratio, easy scalability and upgradeability 
and recycling properties of the hardware components. If this is 
true for any organization, we are convinced that it is imperative 
for an academic institution like our University. Therefore we 
make a proposal of deployment of such a device starting with a 
schematic installation to be eventually enlarged and improved. 
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Abstract-The stream cipher A5/2 is used in GSM (Global System 
for mobile Communication) for authentication and data 
encryption. There have been numerous successful attacks that 
were launched on A5/2 hence breaking down its security. In this 
paper an evaluation of Cipher-text only attack is presented with 
an easy understanding of the equation solver; how the equations 
are generated and solved. Furthermore this paper also reviews 
that how hardware-only attacker can easily recover the initial 
states of A5/2 that is more than enough in decrypting all other 
frames without any pre-computation and storage of the 
information. It also tries to suggest corrections in the design, if 
any, based on the deeper analysis of the operations. 

Keywords- A/5, GSM, cryptanalysis, stream ciphers 
I. INTRODUCTION 

GSM (Global System for Mobile Communication) the 
digital cellular system that has covered the entire mobile 
communications in Europe and Asia. As in mobile 
communication, the main dealing is with real time 
applications such as data, voice and video so using stream 
cipher is the best option for achieving authentication and 
data encryption. GSM uses A5/1 Stream Cipher for the 
very same purpose. This algorithm is implemented in 
Europe and is stronger version. Its variant A5/2 is used in 
Asia though it is a weaker version. The design of both the 
ciphers were confidential but were revealed in 1999 by 
reverse engineering. 

There are some core flaws in these ciphers that are 
exploited and hence the security of entire GSM is easily 
be compromised. In any case if mobile phone supports a 
weaker cipher the security can be compromised whatever 
algorithm for security is used by GSM. 

The attacks on A5/2 have been mostly based on 
software implementation and the efficiency count is 
also based on software but in this paper we analyze 
hardware implementation of the attack with detailed 
illustrations and minor adjustments to the existing 
algorithm. With the help of cipher-text only attack we 
achieve our goal of breaking the security of A5/2 
without any pre-computation and storage. Hence our 
primary focus is on providing a review over the 



cipher-text attack only based on hardware 
implementation. 

II. BRIEF DESCRIPTION OF A5/2 
STREAM CIPHER 

A5/2 is a stream cipher in which sender and receiver 
must be synchronized as this cipher is synchronous 
stream cipher requiring key stream, plain text and 
producing cipher text by XORing the plaintext with the 
key stream. A5/2 requires 64 bit key that we denote by 

K= (k 0 , k[ k 2> k 3 k 63 ) the key must be belonging 

to GF(2 64 ) it also required the 22 bit frame number that 
acts as an Initialization Vector (IV). The Initialization 
Vector must be defined under the GF (2 22 ) we identify the 
IV = (IVo, IVi, .... IV21). There is no privacy in the frame 
number as it is publicly known. In A5/2 there are four 
Linear Feedback Shift Registers (LFSRs). The length of 
each LFSR is relatively prime to each other. We 
recognize them Rl, R2, R3 and R4 and the length of each 
register is 19, 22, 23, 17 bits respectively. In order to 
retain the desired properties of the LFSR we choose the 
primitive polynomial with maximum period and large 
linear complexity. Rl, R2 and R3 are the registers used 
for producing the key stream and R4 is used to control the 
remaining 3 registers with the help of clocking signals. 
The internal structure of A5/2 is described in Table 1 . 

A. Initialization Phase 

Initially the LFSRs are filled up with the 64 bit values 
of the key K, but before this all the registers are filled up 
with the 0. The key bits are inserted one bit at a time to all 
the registers in parallel. The first bit of the key is XORed 
with the ith position of register; each register is filled up 
with the 64 bit key. After every cycle the registers are 
clocked unconditionally. The similar step is followed for 
the Initialization Vector (IV) and its 22 bit frame number 
is inserted in the registers. 
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LFSR 


Length of LFSR 


Primitive Polynomial 


Clocking bit 


Tapped bits 


1 


19 


X 18 + X " + X l« + X 13 +1 


8 


13, 16, 17, 18 


2 


22 


x 21 + x 20 + l 


10 


20, 21 


3 


23 


x *2 + x 21 +x 20 + x 7 +1 


10 


7, 20, 21, 22 


4 


17 


X 16 + x u + l 




16,11 



This process is summarized in following four steps: 

Step 1: Initially all registers are filled with 0 
R1=0; R2 = 0; R3 = 0;R4 = 0 

Step 2: 64 bits of Key (K) from 0 to 63 bits are inserted 
Rl, R2, R3, R4 are regularly clocked 
R1[0] =R1[0] ©K„ 
R2[0] = R2[0] 0 K; 
R3[0] =R3[0] e K; 
R4[0] = R4[0] 0 K, 

Step 3: 22 bits of Initialization Vector (IV) from 0 to 21 
bits are inserted 

Rl, R2, R3, R4 are regularly clocked 

R1[0] =R1[0] elVi, 

R2[0] = R2[0] 0 IV, 

R3[0] =R3[0] elVi 

R4[0] = R4[0] 0 IV, 

Step 4: Rl [15], R2 [16], R3 [18] and R4 [10] are 
assigned 1 

B. The Key Generation Phase 

After the initialization phase the register R4 is 
clocked 99 times and the output is discarded. After this 
phase the registers Rl, R2 and R3 are clocked irregularly 
based on the majority bits of Register R4. The clocking 
is determined by the bits R4[3], R4[7], and R4[10] in 
each clock cycle. The majority of the three bits are 
computed, and the registers Rl, R2 and R3 are then 
clocked based on the majority function. Rl is clocked if 



R4[10] agrees with the majority. R2 is clocked if R4 [3] 
agrees with majority and R3 is clocked if R4 [7] agrees 
with the majority bit. In this way the registers are 
clocked irregularly and in each cycle at least two of the 
three registers are clocked. 

C. Output Stream Bit Generation 

In each register the majority of two bits and the 
complement of a third bit is calculated. 

Rl; majority (bit 12, complement of bit 14, bitl5) 
R2; majority (bit 9, bitl3, complement of bitl6) 
R3; majority (complement of bit 13, bitl6, bit 18) 

The result of each majority bit and the right most bit of 
each register is XORed giving out the output bit. In this 
fashion 228 bits are generated the first 114 bits are used 
to encrypt the link from network to the subscriber and 
the remaining 1 14 bits are used to encrypt the link from 
subscriber to the network. 

III. Cryptanalysis Of A5/2 Cipher 

The cryptanalysis of the A5/2 stream cipher is 
presented in detail in [1] along with its hardware 
implementation. We present the an overview of each the 
individual blocks of hardware implementation of the 
proposed algorithm with some minor adjustments that 
we feel have been ignored. The cryptanalytic attack on 
the A5/2 stream cipher exploits some properties of the 
cipher blocks to deduce the initial secret states of the 
LFSRs. Before we look into the cryptanalytic 
architecture we elaborate the process of encryption 
tracking up to bit level the impact on the equations that 
are generated by the proposed architecture. 
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Fig 1: The schematic of the A5/2 stream cipher generation structure [1] 



A. Brief Overview of Encryption Process 

We have a brief overview of the encryption process 
as discussed by Bogdanov, Eisenbarth, and Rupp in their 
paper titled "A Hardware -Assisted Realtime Attack on 
A5/2 Without Precomputations" [1], to understand the 
impact of bit level processes on the cryptanalysis. The 
data blocks ID 0 , ID| and ID 2 as shown in Fig 2 are 
passed through error correction coding block. In this 
case the error correction is provided by convolutional 
coding that adds redundancy on the data blocks and 
transforms 267 bit blocks into 456 bit blocks i.e CD 0 , 
CD! and CD 2 respectively. That is further passed on to 
another block that performs reordering and interleaving 
on the coded blocks to evade the effect of burst errors 
that spreads out the errors in multiple blocks that appear 
as isolated errors easily corrected. The result of the 
reordering and interleaving block is the sixteen plaintext 
blocks. Thus we have data of three 456 bit blocks CD 0 , 
CDi and CD 2 spread over sixteen 114 bit blocks P 0 , Pi, 
and so on upto Pi 5 The A5/2 key stream generator takes 
in the initial 64 bit Key 'K' and 22 bit initialization 
vector IV (IV 0 , IVi, .... IV 2 i) and generates sixteen 114 
bit key stream blocks S 0 , Si and so on upto Si 5 The 
stream blocks are XORed with the plaintext blocks to 
give cipher text blocks C 0 , Q and so on upto Ci 5 . This 
completes the encryption process as illustrated in Fig2. 

We briefly narrow down to the reordering and 
interleaving block to see what really happens inside. As 
illustrated in the detailed diagram in Fig3, the three 456 
bit blocks under consideration CD 0 , CDi and CD 2 are 
reordered and interleaved resulting in the chunks of eight 
57 bit blocks. The details of interleaving are narrowed 



down in the following section. The data of the three 456 
bit blocks is spread over sixteen 1 14 bit plaintext blocks. 
As shown in Fig 3, the data of the block CD 0 is spread 

over eight blocks P 0 , Pi P7. Similarly the data of 

block CDi is covered by eight blocks P 4 , P 5 Pn and 

that of block CD 2 is covered by eight blocks P 8 , P 9 

Pi 5 . The bits in the first four 57 bit chunks of CD 0 are 
placed at the even positions of the plaintext blocks P 0 , 
P b P 2 and P 3 while the odd positions are covered by the 
bits of last four chunks of the preceding block. Similarly 
the bit in the last four 57 bit chunks of CD 0 are placed at 
the odd positions of the plaintext blocks P 4 , P 5 , P 6 and P 7 
while the even positions are covered by the bits of first 
four chunks of the CDi block. The similar procedure 
follows for CDi and CD 2 We notice a specific property 
of the 456 bit encoded blocks CD 0 , CDi and CD 2 . This 
property can be summarized in following equation: 

cdi,2j 0 cdi,2j+l 0 cdi,2j+2 0 cdi,2j+3 © cdi,2j+6 © 
cdi,2j+8 © cdi,2j+9 = 0 where 0<j<184 (1) 

We exploit this specific property for cryptanalysis to find 
the initial secret states of the LFSRs of the A5/2 stream 
cipher. We notice that for any 456 bit block CDi we get 
185 different equations satisfying above condition. Since 
the data of each of the CDi block is spread over eight 
plaintext blocks, we select the span of eight plaintext 
blocks to get the required bits 
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Fig 2: Block diagram showing the process flow of A5/2 Encryption [1] 



satisfying above condition. These bits are carried 
forward onto the ciphertext blocks thus our focus shifts 
to eight consecutive stream bit blocks and respective 
ciphertext blocks satisfying above equation. This 
phenomenon is illustrated in Fig 3. The equation that we 
get becomes: 

cf(/,2y) © cf(/,2y+l) © cf(i,2j+2) © c/U,2y+3) © c/(/,2y+6) 
© c/(/,2/+8) © cf{i,2j+9) © 

sf(/,2y) © sf(/,2/+l) © sf(/,2y+2) © sf(/,2y+3) © sf(/,2y+6) © 
sf(/,2y'+8) © sf(/,2y+9) 

= pf(/,2y) © pf(/,2y+l) © pf(/,2y'+2) © pf(/,2y+3) © pf(/,2y'+6) 
© pf(/,2y+8) © pf(/,2y+9) 

= cd;',2y" © cd;',2y+l © cd/,2y+2 fficd/',2y+3 © cd/,2y+6 © 
cd/',2y+8 © cd;',2y'+9 = 0 (2) 

The function f(I,2j) in equation (2) shows the process of 
interleaving and reordering. After interleaving and 
reordering process we get the sixteen plaintext blocks 
and then subsequent ciphertext blocks after XORing 



withll4 bit stream blocks. Fig 4 shows the bit level 
impact of the interleaving process and shows the case for 
CD t when j = 1 and the equation (1) becomes 
cdi,2 © cdi,3 © cdi,4 © cdi,5 © cdi,8 © cdi,10 © cdi,ll = 0 

where 7 = 1 (3) 

After reordering and interleaving we observe from Fig 4, 
that this equation depends on five plaintext blocks and 
consequently five ciphertext and stream bit blocks. For 
the equation (3) the blocks are P 0 , P 2 , P3 , P4, P5. We 
refer to Fig 4 in the following section to see how this 
information helps us in understanding the cryptanalysis 
architecture. From this point we move on to the brief 
overview of the cryptanalysis process. 

B. Overview of Cryptanalytic Process 

As discussed in the previous section, we exploit the 
property of the encoded blocks that reflects in different 
form ehil going through the interleaving and reordering 
process. We keep track of the bits 
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Fig 3: Detailed overview of the encryption process preceded by interleaving 

0 



required to satisfy one of the equations given as 
equation (3). The overview of the cryptanalytic 
architecture is given in Fig 5. The Process of 
cryptanalysis begins by identifying the main unknown 
values that are to be sorted out to break the cipher. 
During the process what we are available with are 
sixteen cipher text blocks from air. Then we know that 
the stream blocks used to encrypt the plaintext blocks 



are unknowns. To determine the stream bits we go 
back into the process of encryption and identify the 
secret initial states of the LFSR's being the main 
candidate of unknowns to be found out. We denote the 
initial secret states of the LFSR, as g.q, a i, 0.2, o. 0.4, 
and so on till a 77 . This gives us total of 78 initial secret 
states that we are required to find out during the 
process. 
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The stream generator SG2 generates variables for this block and the variable for 
this bit is generated. 



The stream combiner SC needs the variables defining this stream bit as well for 
generating the equation so it needs to be stored in the buffers and corresponding 
ciphertext bits also need to be stored. The current design uses only two buffers to 
store the variables and values for current and last one stream bit Sh.k, Sh,k-1 and 
ciphertext bit Ch,k, cti,k-i 

SUGGESTED IMPROVEMENT: We need three buffers instead of two altogether 
for each equation to store the current values and the last two values as we get the 
two consecutive values needed for the equation with the gap of another value 
belonging to other blocks due to interleaving i.e. Sh,k, Sh,k-t, Sh.k-2 and Ch,k, Ch,k-1, Ch,k-2 



inn 



C2 C3 



C4J [C5J C6 



C7 



Fig 4: Detailed overview of the encryption process preceded by interleaving 



During the encryption process and generation of stream 
bits using majority function of the three LFSRs Rl, R2 
and R3 we observe that we get different combinations of 
the terms a 0 , a h a 2 , a 3 , to a 60 that contribute to each of 
the stream bit s hk . We have following combinations 
possible: 

18 C 2 + 21 C 2 + 22 C 2 + 61 

= (18)(17)/2 + (21)(20)/2 + (22)(21)/2 + 61 

= 594 + 61 = 655 (plus a constant) 

The above expression shows that there are 61 values 
comprising of single variable a 0 , ai, a 2 , a 3 , to a 60 while 
594 values are quadratic combinations of these single 
variables. We take these quadratic combinations as new 
variables, summing total variable up to 655. The 
different combinations of these variables give the stream 
bits as output. This assumption is used in [1] to propose 



the cryptanalytic architecture. The said architecture as 
shown in Fig 5 comprises of five main blocks: 

1) Ciphertext Module (CM) 

2) Equation Generators (EG) 

3) Linear System of Equation (LSE) Solver 

4) Key Tester (KT) 

5) Control Logic Unit (CLU) 

We briefly touch each of these blocks and present an 
overview of their internal working. 

1) Ciphertext Module (CM) 

This module contains buffers to store the ciphertext 
blocks an the Initialization Vectors (IV). For ciphertext 
block it has 24 memory locations to store the blocks in 
the groups of eight that are further required for 
processing by the Equation Generator (EG) block. The 
Initialization Vectors (IV) are stored in 16 memory 
modules. The first bit of each of the 24 ciphertext 
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memory modules is connected to the Equation Generator 
(EG) module that is rotated forward or backward to 
access other bits. Similarly the same bit are provided to 
Key Tester (KT) module. 



2) Equation Generator (EG) 

The Equation Generator Module consists of three EG 
sub modules named as EG 0 , EG[ and EG 2 . The three sub 
modules are meant to generate equations for CD 0 , CD[ 
and CD 2 . Each of the EG sub module operates on eight 
ciphertext blocks and generates 185 equations 



Co Cl 5 , IVo, . t /Vl5 (ill) 



CiphHrtexH 
Module (CM) 



Equal ion 
Generators (EG) 



Key Te&ter (KT) 



LSE Solver 



. QITS (out) 



Fig 5: Overview of Cryptanalytic architecture [1] 



satisfying the condition given in equation (1). The total 
of 555 equations generated from the three EG sub 
modules are then passed on to the LSE Solver for further 
processing. The three sub modules of EG operate on the 
eight consecutive ciphertext blocks to generate equations 
from the data spread over these blocks. The sub module 
EGooperated on blocks Co to C7. The sub module EGi 
operates on the blocks C4 to Cn and consequently EG2 
operates on blocks C 8 to C 15 . Fig3 clearly shows how the 
data of CD 0 , CDj and CD 2 are spread over the plaintext 
blocks and then carried onward to the ciphertext blocks. 
Each of the sub modules EGi contains eight Stream 
Generator SG blocks and a stream combiner (SC) block 
as shown in Fig 6. Each of the Stream Generators SG; is 
meant to generate the 655 variable coefficients (along 
with a constant) for the 1 14 stream bits associated with 
each of the eight ciphertext bits. Each ciphertext bit is 
XORed with the constant value generate from the SG; 
and then stored in the buffer. The Stream Combiner (SC) 
has a job of taking appropriate values from the output of 
each of the SG ; and combine them and pass it on to the 
LSE block. As shown in Fig 4 we observe that we need 
the current value and some of the old values to form an 
equation. 

a) Suggested Improvement & Analysis 

Fig 6 shows the buffers at the output of the SGj but 
we show with the help of Fig 4 that there needs to be 
some correction as there are only two buffers to store the 
current and the previous coefficient values, while we 



need to have three buffers because we get the right 
pervious value before two stream bits due to the effect of 
interleaving. We show this correction in Fig 8. 



Focusing on Stream Generator (SG) we have 
architecture as shown in Fig 7 for all three LFSRs. 
Instead of single row vector LFSRs was have multiple 
row LFSRs with each row representing 61 unknown 
variables and a constant value while the locations of 
these LFSRs represents the coefficients of those 
variables as their dependencies at those positions of 
LFSRs. Fig 7 shows the vector LFSR for Rl only and 
their respective dependencies. These are explained in 
detail in [1]. The addition of the extra buffer would 
increase hardware as 24 memory locations of 656 bits 
are added in EG module and 24 more are added in KT 
module. It does not increase the power consumption 
because only two resisters at a time are clocked to 
generate the equations. But there will be power overhead 
for there are two registers being updated for each output 
of SGj in present design as shown in Fig 6 while after 
correction three registers are updated as shown in Fig 8. 

3) Linear System of Equation (LSE) Solver 

The Linear System of Equation (LSE) Solver module 
buffers in 555 equations in its buffers while each 
equation is represented by 655 variable coefficients 
while 655 unknowns are to be found. The process used 
for this purpose is Guass Jordon Elimination that is 
discussed in [1]. 
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Fig 7: Overview of internal structure of LFSR Rl's representation in SG[1] 



The equations are arranged in m x n matrix where m is 
the number of rows and that equals to 555 representing 
the total number of equations while n represents the total 
number of variable inclosing the constant value that is 
equal to 656. Using this process we are able to get a 
candidate value of initial state variables a 0 , a h a 2 , a 3 , to 
a 60 . This candidate is then passed on to the Key Tester 
(KT) for verification if the calculated candidate for the 
initial secret state is correct or not. 



4) Key Tester (KT) 

The key tester module takes the candidate values 
from the LSE Solver and verifies its correctness. The 
Key Tester (KT) module contains the same A5/2 
encryption architecture. It sets the initial state candidate 



values in the LFSRs and calculates the output stream bits 
that are XORed with right ciphertext bits from 
Ciphertext Module (CM) and then passed on to stream 
combiner that take in right values, generates equation 
satisfying condition in equation (q) to test if its values 
are equal to zero. If any of the values comes out to be 
one then the candidate fails and new candidate value is 
generated by LSE Solver and then tested again at Key 
Tester (KT) module. These values are tested for all 
possible values of R4 LFSR. Similarly the equations in 
Equation Generator (EG) module are generated for al 
possible values for R4 LFSR. 

5) Control Logic Unit (CLU) 

The Control Logic Unit (CLU) is used to control the 
operations of all the four modules by clocking then and 
giving out control signals. This is also discussed in detail 
in [1]. 
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IV. CONCLUSION 

We presented the overview of the cryptanalytic attack 
on the A5/2 cipher and the proposed hardware 
architecture to carry out the cryptanalysis and suggested 
some minor corrections that contribute to the 
improvement in the design based on the bit level analysis 
of the data. 
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Abstract — In this Research paper, the simulations of call drop 
and handover failure in GSM network tele-traffic through 
OMNeT++ are presented. The results obtained in different 
scenarios are examined and analyzed which simulates a large 
business city in busy hour a number call attempts by the 
mobile phone users, with different characteristics of network 
coverage. This simulator is a discrete event simulator 
programmed in OMNeT++, focusing on the research of wireless 
or wired networks. It is also a flexible environment which 
allows its extension to different aspects of GSM technology, 
such as the simulation of successful calls, call drops and 
handover failure probabilities etc. 

Keywords- Graphical NED Editor; Integrated Development 
Environment; Mobile Station; Base Transceiver Station; Integrated 
Services Digital Networks; OMNET; 

I. Introduction 

Building a simulation of a telephone system GSM cellular 
mobile OMNET using the simulator to measure the parameters 
Recommended minimum quality voice service. The main 
objective of this research paper is to create the different 
environments of simulation and measurement on the system of 
GSM cellular phone. Another objective is to design and 
construct a simulation of a cellular mobile telephone system 
GSM by using the simulator OMNET. In this research paper 
the specific objective is to analyze the operation under 
minimum parameters on the voice channel in the 
implementation of a simulation of a cellular telephone 
system GSM technology through OMNET and analyzing 
the results of building simulation. 

n. Simulation Technique for Analysis 

OMNET simulator generates an output of the simulation, 
which is given into data files, output vector files, output scalar 
files, and possibly the users own output files. The output vector 
file allows observing the behavior of each MS in simulation 



time. This is to analyze the behavior of the minimum 
standards of quality that must be provided to the GSM Cellular 
System. OMNET simulator generates an output vector file 
which allows observing the behavior of each MS in simulation 
time. This is to analyze the behavior of the minimum standards 
of quality that must be provided to the GSM Cellular System. 
OMNET contains graphical publishers Scalars and Plove 
which generates result in graphical form, therefore facilitating 
the analysis of the simulation [1]. 

III. Result Analysis in Different Scenarios 



A. TABLE-1: General Characteristics of Scenario 1 



Properties 


Characteristics Data 


Simulation area: 


1 km 2 (1000 m x 1000 m) 


Number of MS: 


50 mobile stations 


30 MS with linear trajectories 


20 MS with random trajectories: change 
direction after lifetime (random between 0 
to 200 s) 


Speed of MS: 


(minimal 0.0 m/s) (maximum 7.1 m/s) 
(average 1 .7 m/s) 


Power measurements: 


one measure per second 


MSISDN: 


6009000xx, where xx is the MS number 
(from 0 to 49) 


Number ofMSC: 


1 


Number of BTS: 


1 


Transmission power of 
BTS: 


4dBm 


Position of the BTS: 


The simulation area has permanent 
coverage of the BTS. 


Number of traffic 
channels of the BTS: 


14 


Calls processing in MS: 


Exponential function with inter-arrival 
time of 10 min 


Exponential service time distribution 
(duration of calls) with average service 
time of 2 min (120 s) 


Probability of intra - 
MSC calls: 


0% (every MS calls always to another MS 
out of the simulation that is assigned to a 
factitious MSC not present in the 
simulation). 
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• Scenario 1: 

There is a single BTS situated in the center, which manages 
the total area. The transmitted power attenuation of 4 dB m 
corresponds to a circumference of radius 73 1 m. This scenario 
includes 50 MSs moving inside the zone of study, 30 of which 
have linear trajectories and 20 have random ones. This 
scenario is quite simple, but contains enough GSM parameters 
to obtain several conclusions. The configuration file also 
collects information about the initial position and speed of 
each MS. Remember that not all MSs have the same speed. 
The service time distribution is exponential with average 
service time established in 2 min (120 s). The single BTS is 
also positioned on the center. Over this point, (500; 500) of the 
simulation area, the MS has an attenuation which fits with the 
maximal in the graphic. Due to the BTS having 14 traffic 
channels to serve the communication demand, the number of 
busy traffic channels is always less than or equal to 14. When 
the BTS has the 14 traffic channels assigned, congestion in 
calls is produced. During congestion, any new call attempts 
will be rejected. This scenario considers that all calls are out- 
MSC, i.e. every MS in the simulation area is calling to a 
fictitious MS depending on another MSC not present in the 
simulation area [2], 

By applying this scenario we simulate the Omnet & get the 
following Graphs. The different analytical graphs of the same 
MSs according to the scenario are given below: 



Figures of Scenario 1 
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FIGURE-1: Analysis of the results Received Power & Simulation Time at MS 
(5) in scenario 1. 

Here the examples of MS in Scenario- 1, shows the received 
power of each MS from one BTS. This figure shows the graph 
of MS (5) from BTS (0). In this scenario, there is 50 MS & 1 
BTS. 

















"Yarjifi! BTSfOJ si g 


srnsim.afr (gsmsim 


uec) 






I 














- 




\ 




































\ 




































V 




/ \ 































FIGURE-2: Analysis of the results Received Power & Simulation Time at 
MS (10) in scenario 1. 

Figure-2 shows the graph of MS (10) from BTS (0). Here MS 
in Scenario- 1 shows the received power of each MS from one 
BTS. In this scenario, there is 50 MS 30 linear & 20 random. 
Total power is 4 dB. The trajectories of every MS in the area 
during a busy hour simulation show the BTS coverage. Fig.l 
shows MS with 5 identifier and with a linear (path type 0) 
trajectory. Fig.2 shows MS with 10 identifier and with a 
random (path type 1) trajectory. 
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FIGURE-3: Analysis of the total channel of BTS (0) in scenario 1. 

The total Traffic Channel (TCH) is a logical channel that 
allows the transmission of speech or data. In most second 
generation systems, the traffic channel can be either full or 
half rate. 



B. TABLE-2: General Characteristics of Scenario 2 
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Properties 


Characteristics Data 


Simulation area: 


4 km 2 (2000 m x 2000 m) 


Number of MS: 


50 mobile stations 


30 MS with linear trajectories 


20 MS with random trajectories: 
change direction after lifetime 
(random between 0 to 200 s) 


Speed of MS: 


(minimal 0.0 m/s) (maximum 7.1 
m/s) (average 1.7 m/s) 


Power measurements: 


One measure per second 


MSISDN: 


6()09()00xx, where xx is the MS 
number (from 0 to 49) 


Number of MSC: 


1 


Number of BTS: 


3 


Transmission power of 
BTS: 


7dBm 


Position of the BTS: 


there is a small area without 
coverage of the BTSs. 


Number of traffic channels 
of the BTS: 


7 


Calls processing in MS: 


Exponential function with inter- 
arrival time of 10 min 


Exponential service time 
distribution (duration of calls) 
with average service time of 3 
min (180 s) 


Probability of intra-MSC 
calls: 


33% (probability that a call 
generated in the current MSC has 
as destination another MS located 
in the same MSC). 


Scenario 2: 



In this scenario, there is three BTSs situated approximately 
equal distances, which manages the total area of MSC. The 
transmitted power attenuation of 7 dBm in Table-2 
summaries the main characteristics of Scenario-2. Table-2 
is an extract of the configuration file 'omnetpp.ini'. As in 
Scenario 1, it is a busy hour. The area simulation of Scenario-2 
is larger than the first scenario. In this scenario we assign 2 
kilometers long to both sides of the square area. Some 
parameters are similar in both scenarios, as number of MSs. 
This scenario also includes 50 MSs moving inside the zone of 
study, 30 of which have linear trajectories and 20 have random 
ones [3]. 

In this case, the simulation is on a network with a single MSC; 
however, the program can simulate calls between MSs within 
the simulation and other MSs which depends on a MSC out of 
the simulation area. Scenario- 1 worked only with calls from a 
MS to a fictitious MS connecting to another MSC, but 
Scenario 2 considers calls between MSs present in the area 
and so is depending on the current MSC. This scenario 
assigns the probability of 33% of intra-MSC calls and also 
indicates average rates of service time & call generating 
distributions. The average service time call is now 3 minutes 
and the calls generating process of each MS is an exponential 



distribution of average rate of 1/600 calls per second, that 
means call attempts every 10 min. We consider three BTSs in 
the simulation. We have defined these three BTSs to be 
approximately of equal range. The most significant BTS 
characteristics are 7 traffic channels and a transmission power 
of 7 dB m. We observe that in this case there are MSs moving 
in zones without coverage. Any call attempt on those positions 
will fail. By applying this scenario we simulate the Omnet & 
get the following Graph. 



Figures of Scenario 2 
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Simulation Time (s) 

FIGURE-4: Analysis of the results Received Power & Simulation Time at 
MS (5) in scenario 2. 

Here are the examples of MS in Scenario-2 that show the 
received power of each MS from the three BTS. In this 
scenario number of MS is 50. This figure shows the graph of 
MS (5) from BTS (0). 
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Simulation Time (5) 

FIGURE-5: Analysis of the results Received Power & Simulation Time at MS 
(5) in scenario 2. 

In figure -5, the examples of MS in Scenario-2 that show the 
received power of each MS from the three BTS. This figure 
shows the graph of MS (5) from BTS (0), BTS (1) & BTS (2). 
In this scenario, number of MS is 50. 
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Simulation time (s) 

FIGURE-6: Analysis of the results Received Power & Simulation Time at 
MS (10) in scenario 2. 

In figure-6, the example of MS in Scenario-2 shows the 
received power of each MS from the three BTS. Here in this 
scenario, number of MS is 50. This figure shows the graph of 
MS (10) from BTS (0). 




Simulation Time (s) 

FIGURE-7: Analysis of the results Received Power & Simulation Time at 
MS (10) in scenario 2. 

Here are the examples of MS in Scenario-2 that show the 
received power of each MS from the three BTS. This figure 
shows the graph of MS (10) from BTS (0), BTS (1) & BTS 
(2). Here in this scenario, number of MS is 50, 30 linear & 20 
random. Total power is 7 dB. The trajectories of every MS in 
the area during a busy hour simulation show the BTS coverage. 
Fig. 04 & 05 shows have MS with 5 identifier with a linear 
trajectory. Here path type is 0. Fig.06 & 07 shows MS with 10 
identifier with a random trajectory, here path type is 1. 



Simulation Time (5) 

FIGURE-08: Graph of frame dropped or analysis of the result for call drop in 
scenario 2. 

A type of time code designed to match the real time of clocks. 
Two frames of time code are given. On the other side, Call 
drop is the common term for a wireless mobile phone call that 
is terminated unexpectedly as a result of technical reasons, 
including presence in a dead zone [4]. 
































































































- 



























Simulation Time (s) 

FIGURE-9: Graph of offered load to obtain results for scalar in scenario 2. 

Offered Load is the total traffic load, including load that results 
from retries, submitted to a telecommunications system, group 
of servers, or the network over a circuit in the sector of 
telecommunication [5]. 

In frame relay, the data rate, as measured in bits per second 
(bps) offers the network for delivery. The aggregate offered 
load can be less than the access rate supported by the access 
link and the port speed of the frame relay network device but 
can never exceed that is less [6]. 
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Simulation Time (5) 

FIGURE-10: Graph of Throughput to obtain results for scalar in scenario 2. 

In communication networks, such as Ethernet or packet radio, 
throughput or network throughput is the average rate of 
successful message delivery over a communication channel. 
This data may be delivered over a physical or logical link, or 
pass through a certain network. Throughput is sometimes 
normalized and measured in percentage, but normalization 
may cause confusion regarding what the percentage is related 
to. Channel utilization and packet drop rate in percentage are 
less ambiguous terms. The channel utilization, also known as 
bandwidth utilization efficiency, in percentage is the achieved 
throughput related to the net bit rate in bit/s of a digital 
communication channel. For example, if the throughput is 70 
Mbit/s in a 100 Mbit/s Ethernet connection, the channel 
utilization is 70%. In a point-to-point or point-to-multipoint 
communication link, where only one terminal is transmitting, 
the maximum throughput is often equivalent to or very near to 
the physical data rate (the channel capacity), since the channel 
utilization can be almost 100% in such a network, except for a 
small inter-frame gap PI The throughput is usually measured 
in bits per second (bit/s or bps), and sometimes in data 
packets per second or data packets per time slot. The system 
throughput or aggregate throughput is the sum of the data rates 
that are delivered to all terminals in a network. 
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Total Traffic Channel (TCH) is a logical channel that allows 
the transmission of speech or data. In most second generation 
systems, the traffic channel can be either full or half rate [7]. 

C. TABLE 03: General Characteristics of Scenario 3 



Properties 


Characteristics Data 


Simulation area: 


9 km 2 (3000 m x 3000 m) 


Number of MS: 


85 mobile stations 




50 MS with linear trajectories 




35 MS with random trajectories: change 
direction after lifetime (random between 0 
to 200 s) 


Speed of MS: 


(minimal 0.0 m/s) (maximum 7.1 m/s) 
(average 1.7 m/s) 


Power 

measurements: 


one measure per second 


MSISDN: 


6009000xx, where xx is the MS number 
(from 0 to 84) 


Number of MSC: 


1 


Number of BTS: 


7 


Transmission power 
of BTS: 


7dBm 


Position of the BTS: 


there is a small area without coverage of the 
BTSs. 


Number of traffic 
channels of the BTS: 


7 


Calls processing in 
MS: 


Exponential function with inter-arrival time 
of 10 min 




Exponential service time distribution 
(duration of calls) with average service time 
of 3 min (180 s) 


Probability of intra- 
MSC calls: 


5% (probability that a call generated in the 
current MSC has as destination another MS 
located in the same MSC) 



FIGURE-11: Analysis of the total channel of BTSs in scenario 2. 



• Scenario 3: 

In this scenario, there are seven BTSs situated at several 
distances that manage the total area of MSC. The transmitted 
power attenuation of 7 dB m. in Table-3 summarizes the main 
characteristics of Scenario-3. Table-3 is an extract of the 
configuration file 'omnetpp.ini'. As in Scenario 1, it is a busy 
hour. The area simulation of Scenario 3 is larger than the first 
and second scenarios. In this scenario we assign 3 kilometers 
length to both sides of the square area. Some parameters are 
similar in above scenarios. 

This scenario includes 85 MSs moving inside the zone of 
study, 50 of which have linear trajectories and 35 have 
random ones. In this case, the simulation is on a network with 
a single MSC; however, the program can simulate calls 
between MSs within the simulation and other MSs that depends 
on a MSC out of the simulation area. Scenario 1 worked only 
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with calls from a MS to a fictitious MS connecting to another 
MSC, but Scenario 2 considers calls between MSs present in 
the area, and so is depending of the current MSC. We assign the 
probability of 5% of intra-MSC calls in this scenario. 
In this table we indicate average rates of service time and call 
generating distributions. The average service time call is also 
3 minutes in this scenario and the calls generating process of 
each MS is an exponential distribution of average rate of 
1/600 calls per second, that means call attempts every 10 
min. Here we consider seven BTSs in the simulation. We 
have defined these seven BTSs to be equivalent. The most 
significant BTS characteristics are 7 traffic channels and a 
transmission power of 7 dB m. We observe that in this case 
there are MSs moving in zones without coverage. Any call 
attempt on those positions will fail. By applying this scenario 
we simulate the Omnet & get the following Graph. 




MiiiuldttDii Time (s) 

Figure-13: Analysis of the results Received Power & Simulation Time at MS 
(5) in scenario-3. 

In figure-13, the examples of MS in Scenario-3 that show the 
received power of each MS from the seven BTS. This figure 
shows the graph of MS (5) from BTS (0) to BTS (6). Here in 
this scenario, number of MS is 85. 



Figures of Scenario 3 




Simulation Time (s) 

FIGURE-12: Analysis of the results Received Power & Simulation Time at 
MS (5) in scenario 3. 



Here the examples of MS in Scenario-3 that shows the 
received power of each MS from the seven BTS. Here in this 
scenario, number of MS is 85. This figure shows the graph of 
MS (5) from BTS (0). 
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Simulation Time (s) 

FIGURE-14: Analysis of the results Received Power & Simulation Time at 
MS (10) in scenario 3. 

Here the examples of MS in Scenario-3 that shows the 
received power of each MS from the seven BTS. In this 
scenario, number of MS is 85. This figure shows the graph of 
MS (10) from BTS (0). 
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FIGURE-15: Analysis of the results Received Power & Simulation Time at 
MS (10) in scenario 3. 
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Here are the examples of MS in Scenario-3 that show the 
received power of each MS from the seven BTS. This figure 
shows the graph of MS (10) from BTS (0) to BTS (6). In this 
scenario, number of MS is 85, 50 linear & 35 random. Total 
power is 9 dB. The trajectories of every MS in this area during 
a busy hour simulation show the BTS coverage. Fig. 12 & 13 
shows MS of 5 identifier with a linear trajectory. Here path 
type is 0. Fig. 14 & 15 shows MS with 10 identifier consisting 
of a random trajectory, here path type is 1. 

D. TABLE 04: General characteristics of Scenario 4 



Properties 


Characteristics Data 


Simulation 
area: 


4 km 2 (2000 m x 2000 m) 


Number of 
MS: 


100 mobile stations 


60 MS with linear trajectories 


40 MS with random trajectories: 
change direction after lifetime (random 
between 0 to 200 s) 


Speed of 
MS: 


(minimal 0.0 m/s) (maximum 7.1 m/s) 
(average 1.7 m/s) 


Power 

measureme 

nts: 


one measure per second 


MSISDN: 


6009000xx, where xx is the MS 
number (from 0 to 99) 


Number of 
MSC: 


1 


Number of 
BTS: 


20 


Transmissi 
on power of 
BTS: 


7dBm 


Position of 
the BTS: 


there is a small area without coverage 
of the BTSs. 


Number of 
traffic 
channels of 
the BTS: 


7 


Calls 

processing 
in MS: 


Exponential function with inter-arrival 
time of 10 min 


Exponential service time distribution 
(duration of calls) with average service 
time of 3 min ( 1 80 s) 


Probability 
of intra- 
MSC calls: 


33% (probability that a call generated 
in the current MSC has as destination 
another MS located in the same MSC) 



• Scenario 4: 

In this scenario there is twenty BTSs situated at several 
distances, which manages the total area of MSC. The 
transmitted power attenuation of 7 dB m. in Table 4 
summarizes the main characteristics of Scenario-4. Table-3 
is an extract of the configuration file 'omnetpp.ini'. As in 
Scenario- 1, it is a busy hour. The area simulation of 
Scenario-4 is larger than the first scenario and small from 
second scenario, here we assign 2 kilometers length to both 
sides of the square area. Some parameters of this scenario 
are also similar in above scenarios. This scenario includes 
100 MSs moving inside the zone of study, 60 of which have 
linear trajectories and 40 have random ones. In this case, 
the simulation is on a network with a single MSC; however, 
the program can simulate calls between MSs within the 
simulation and other MSs which depends on a MSC out of 
the simulation area. Scenario 1 worked only with calls from 
a MS to a fictitious MS connecting to another MSC, but 
Scenario 4 considers calls between MSs present in the area, 
and so is depending on the current MSC. Here we assign the 
probability of 33% of intra-MSC calls. Table 4 indicates 
average rates of service time and call generating 
distributions. The average service time call is also 3 
minutes and the calls generating process of each MS is an 
exponential distribution of average rate of 1/600 calls per 
second that means call attempts every 10 min. Here we 
consider twenty BTSs in the simulation. We have defined 
these twenty BTSs to be approximately equal. The most 
significant BTS characteristics are 7 traffic channels and a 
transmission power of 7 dB m. We observe that in this case 
there are MSs moving in zones without coverage. Any call 
attempt on those positions will fail. By applying this 
scenario we simulate the Omnet & get the following Graph. 

Figures of Scenario 4 
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FIGURE-16: Analysis of the results Received Power & Simulation Time at 
MS (5) in scenario 4. 
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Here are the examples of MS in Scenario-4 that show the 
received power of each MS from the twenty BTS. Here, the 
scenario number of MS is 100. This figure shows the graph of 
MS (5) from BTS (0). 




Simulation Time (s) 

FIGURE-17: Analysis of the results Received Power & Simulation Time at MS 
(5) in scenario 4. 

In figure-38, the examples of MS in Scenario-4 that show the 
received power of each MS from the twenty BTS. This figure 
shows the graph of MS (5) from BTS (0) to BTS (19). Here, 
the scenario number of MS is 100. 




Simulation Time (s) 

FIGURE-19: Analysis of the results Received Power & Simulation Time at 
MS (10) in scenario 4. 

Here the examples of MS in Scenario-4 that shows the 
received power of each MS from the twenty BTS. This figure 
shows the graph of MS (10) from BTS (0) to BTS (19). In this 
scenario, number of MS is 100, 60 linear & 40 random. Total 
power is 12 dB. The trajectories of every MS in this area 
during a busy hour simulation show the BTS coverage. Fig. 16 
& 17 shows MS with 5 identifier consisting of a linear 
trajectory, here path type is 0. Fig. 18 & 19 shows MS with 10 
identifier consisting of a random trajectory, here path type is 1. 
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FIGURE-18: Analysis of the results Received Power & Simulation Time at 
MS (10) in scenario 4. 

Here in figure- 18, the examples of MS in Scenario-4 that 
show the received power of each MS from the twenty BTS. 
Here in this scenario, number of MS is 100. This figure shows 
the graph of MS (10) from BTS (0). 



IV . Result Analysis of the Graphs 

In the above graphs, linear trajectories are characterized by 
'path Type = 0'; random paths are categorized by 'path Type = 
1'. The program assigns a unique MSISDN to every MS, 
which follows the format 6009000xx, where xx is the identifier 
of each MS in the simulation. The configuration files collect 
information about the initial position and speed of each MS. 
All MSs have different speed [8]. Here, MSs following linear 
trajectories generate regular graphics of power attenuation 
that present symmetries, whereas MSs with random 
movements have no regular representations of power 
attenuation. The number of traffic channels is assigned during 
a busy hour simulation. Due to the BTSs having several traffic 
channels to serve the communication demand, the number of 
busy traffic channels is always less than or equal to the number 
of channels we use here. When the BTS assigned 7 traffic 
channels, congestion in calls is produced. During congestion, 
any new call attempts will be rejected. The calls generation 
process is a Poisson's process with average generating call rate 
of 6 calls per hour, which is an average inter-arrival time of 10 
min or 600 s. At the beginning of a call, the MS assigned a 
traffic channel in the BTS which reaches the MS with the 
largest power. After a time, it is possible that another BTS 
covers the MS with a larger power [9]. 
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The network releases a handover when the difference in power 
exceeds a given threshold. GSMSIM has configured this 
threshold to be 9 dB. Another point of these simulations are the 
zones without coverage. When the received power from a 
BTS is less or equal than -102 dB m, GSMSIM considers that the 
MS is out of coverage. In scenario-1, there is no area in out of coverage 
and the other three scenarios have few areas in out of coverage. 
Finally we assume that scenario-4 is more efficient than the 
other scenarios because in this scenario there is more 
channels with respect to the MSs comparing the others 
scenarios. By analyzing the figures we assume that, when 
BTS & Channel increase with respect to area, the call drop 
will decrease proportionately. In this case, hand over will 
increase [10]. 

By analyzing the graph of scenario-3, we calculate the blocked 
calls, successful calls, failed handover & successful handover. 




BTB[0] HTSIII EIS[J| ETS|J| BUM BTS | f | gtSfl B51 




FIGURE-21: Calls in BTS & Handover in BTS by scenario-3 [16]. 



These figures represent the percentage of successful and failed 
handovers and percentage of successful and blocked calls for 
each BTS during the simulation. 

Considering the BSC of the scenario-2, the blocked calls during 
the busy hour simulation reaches the 16% (40 blocked calls and 
210 successful calls). On the other word, the BSC of the 
scenario-3, the blocked calls during the busy hour simulation 
reaches the 6.37% (32 blocked calls and 470 successful calls). 
Possible solutions to decrease these high percentages may be: 
• Review the conditions for a handover; 



• Check the traffic channel assignation algorithm for call 
attempts. If the BTS with more influence (power transmission) 
over a MS has any idle traffic channel, then exanimate the 
second BTS with more influence at scenario-2 [15]. 
Finally, the right part of the Figure-5(A) shows the number of 
handovers for every BTS and BSC. The BSC begins 31 
handover during the simulation, 10 of which fail. It would be 
necessary to evaluate reasons for the very high percentage of 
failed handover operations (32%) [lij.The lower part of Figure - 
5(B) also shows the number of handovers for each BTS and 
BSC. The BSC begins 62 handover during the simulation. 12 
are failed in those handover. It would be necessary to evaluate 
reasons for the very high percentage of failed handover 
operations (19%) [11]. 

V. Conclusion 

The criteria used in each scenario, are defined to provide a 
service of highest quality to users. This leads to multiple tests 
and changes in input parameters of each simulation. These 
parameters make complex designs because the network must 
have Multiple factors to provide quality service. The size to 
optimize coverage, the power to radiate the BTS for greater 
capacity and to ensure quality throughout the service must be 
also taken into account [12] [13]. 

Traffic demand due to the number of users in the cell 
determines the number of timeslots to be configured to ensure 
the minimum number of missed calls (missed calls). 
Throughout, the different simulations showed that the number 
of calls lost depends on the value of timeslots defined by each 
TRX at the station base. It is also noted that the power is a 
factor involving the number of dropped calls, i.e. less power 
than the number of dropped calls (Broken calls) [14]. Observing 
the percentage of calls of different scenarios compared to the 
minimum quality standards that must provide the GSM 
system, one can conclude that these depend on the network 
design itself, such as the number of timeslots, the power, the 
size of the cell, the number of users [15]. The greater the 
number of network users, the higher the number of timeslots. 
The greater the number of timeslots, the lower the number of 
missed calls. The greater their power, greater the coverage and 
lower the number of dropped calls. After a large number of 
simulations, one can observe the Cellular operators by the 
large amount of demand and use limited radio spectrum, 
opting to provide more coverage than quality [16]. 



VI. Future Scope 
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The project can be extended to study the behavior of the 
Handover and the development of module, the interface that 
enables communication between the BTS and BSC. This project 
can be exploring by the great discrete event simulation tool 
OMNET further for the study and design of different types of 
networks. 

VII. Recommendations 

OMNET does not require licensing since it is Open Source. 
This project can be used as a guide for using the simulation 
tool OMNET to serve as a resource in the study of different 
types of networks in the area Telecommunication Systems 
Engineering. 
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Abstract — MIPv6 is a proper replacement for MIPv4 protocol 
which recommended by IETF. IPv6 lieu IPv4 has been chosen as 
convergence layer for next heterogeneous access networks. 
MIPv4 has limiting in protocol, but MIPv6 is created 
fundamental changes such as security enhancements, elimination 
of the Foreign Agent (FA) and route optimization. 
The MIPv6 characteristics defined by the IETF provides 
perspicuous host mobility within IPv6 networks. In MIPv6 MN is 
move between IP subnets without change in its original IPv6 
address configuration. This means that MN ever is addressable in 
the internet via its Home Address (HoA). HoA is IPv6 address 
that is allocated to the MN in its home network. When away from 
the home network, MN can still detect by its HOA in the internet, 
Because packets routed to its HoA. Also In this way, mobility 
transparency of higher layer protocols like Transport layer or 
higher is achieved. 

Keywords- MIPv6; routing; roaming capability 

I. Introduction 

Mobile IPv6 (MIPv6) is a commonly accepted standard to 
address global mobility of Mobile Nodes (MNs) [1]. This is 
one of the main protocols to manage mobile node (MN) 
movements; refer to IETF documentation. This allows the MN 
to acquire and register a new IPv6 address in each visited 
network. Terminology used in Mobile IPv6 as follows [2]: 

A node that can change its situation from one network to 
another, while still being reachable pre its home address, this 
called Mobile Node (MN). Corresponding Node (CN) is a 
mobile node or a fixed node that communicates or corresponds 
with the MN by exchanging packets with MN. The individual 
network that manages the MN is Home Network (HN). 
Foreign Network (FN) is other network that the MN is 
attached lieu of its HN. Home address (HOA) is an 
irreversible IP address assigned to MN within its home 
network. Home Agent (HA) is a router on a MN's home 
network with which the MN has registered its current CoA [3], 
[4] . While the MN is away from home, the HA arrests packets 
on the home network destine to the MN's address, 
encapsulates them, and tunnels them to the MN's registers 
CoA. Access Router gives connectivity to the mobile node at 
its other point of attachment to the Internet. Binding is the 
association of the home address of a Mobile Node (MN) with 



a care-of-address for that MN, along with the remaining 
lifetime of that association. Binding Update which including 
the Home Address (HOA) and the CoA [5], [6]. Care-of- 
Address (CoA) is An IP address associated with a MN while 
visiting a foreign network; the subnet prefix of this IP address 
is a foreign subnet prefix. Among the multiple care-of- 
addresses that a MN may have at a time, the one registered 
with the MN's Home Agent is called its primary CoA. 

The paper is organized as follows: Section 2 and 3 describe 
the scenario 1 and scenario 2 of the proposed scheme, 
respectively. And, both of sections discuss simulation results. 
Finally, Section 4 concludes this paper. 

II. Scenario 1 

(EFFECTS MIPV6-ROUTE-OPTIMIZATION-ENABLED) 

The objective is to demonstrate the effects of Mobile IPv6 
(MIPv6) mechanisms while two mobile nodes communicate 
with each other. Cases for route optimization enable and 
disable are evaluated. 

The IPv6 network is composed by four WLAN access 
points connected through an IP cloud. The core of the 
network, represented by the IP cloud, has a constant latency of 
0.1 seconds. This makes easier to note the effects of the 
different MIPv6 mechanisms over the application delay. 

Table I and II summarize the simulation parameters and 
the network parameters, respectively. 

A. Simulation scenariol 

MN_A and MN_B communicate to each other by running a 
very light video application as a source of constant UDP 
traffic. Initially the mobiles are placed at their corresponding 
home networks. Then MN_A is served by home agent HA_A 
and MN_B is served by home agent HA_B. Both mobiles use 
MIPv6 to roam among the various access points in the 
network. The movement performed by the nodes can be 
described as follows: 

• MN_A: (1A)- MN_A moves in a counterclockwise 
trajectory roaming through all four access points in 
the network. 

• MN_B: (IB)- MN_B moves, first in a clockwise 
trajectory roaming through all four access points in 
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the network. (2B)- Then it moves counterclockwise 
re-visiting all access points again. 
Fig. 1 shows the Scenario 1. 




Figure 1 . Simulated scenario 1 



TABLE I. SIMULATION PARAMETER 



Parameters 


Values 


Network type 


Campus 


Network Dimension 


10km*10km 


Technologies 


Wirelesslan , Ethernet , MIPv6 


Domain Quantity 


4 


Module Radius 


1 km 


Simulation time 


1 7 minute and 47 second 


TABLE II. NETWORK PARAMETER 


Parameters 


Values 


Routers Quantity 


4 


Routers technology 


SLIP , Ethernet , Wirelesslan 


Routers data rate 


1 Mbps 


IP elude Memory 


16MB 


Paket loss of IP elude 


0.1 second 


Workstation Quantity 


2 


Workstation Rate 


1 Mbps 


Workstation Memory 


16MB 



B. Simulation Result For Scenario 1 

The statistics show three main aspects of the dynamics for 
the communication between the two mobiles. 

1 ) Application traffic 
Videoconferencing traffic received show the some gaps in 
the communication. Each gap is produced every time a mobile 
changes its current access point triggering MIPv6 binding 
procedures to inform its home agent about its new Care-of 
Address (CoA). When route optimization is used the mobile 
will also inform to all its correspondent nodes about its new 
CoA. While the binding procedure updates home agent and 
correspondent nodes all traffic directed to the mobile will be 
lost. 

The application response time will be directly affected by the 
MIPv6 mechanism used by the mobile in order to 



communicate with correspondent nodes. There are two 
possible mechanisms used by MIPv6: Route optimization and 
Tunnel/reverse tunnel (route optimization disabled). 

Notice that when route optimization is enabled the 
application delay is reduced compared to the case when route 
optimization is disabled. Below you will find a more detailed 
explanation for this effect. 

Fig. 2 represents video conferencing traffic and video 
conferencing packet delay, respectively. 

2) Mobile IPv6 measurements 

Two mobiles communicating with each other. This means 
that at some point in the simulation the mobile nodes will be 
acting as both a mobile node and/or a correspondent node. 
This cause interesting MIPv6 effects that can be observed at 
the "Mobile IPv6 Traffic" statistic panel: 

• When both mobiles are away from their 
corresponding home networks a double MIPv6 
overhead will occur, either: 

Two MIPv6 tunnels will be needed for the mobiles to 
communicate (mipv6_route_optimization_enabled). In this 
case the application response time delay will be mainly 
produced by the three times the data packet must pass through 
the IP cloud (Internet). Given the latency configured for the IP 
cloud (0.1 sec), the total application delay will be 
approximately 0.3 seconds. 

Two IPv6 extension headers (routing extension header and 
destination extension header) will be used (at the same time) 
to transport the data traffic when using route optimization 
mechanism (mipv6_route_optimization_disabled). In this case 
the application response time will be mainly produced by only 
one time the data packet must pass through the IP cloud 
(approximately 0.1 sec). This is when both mobiles are away 
from home but located in different networks. Now, when both 
mobiles are located at the same access point, the data packets 
will just go through the access point, reducing the application 
response time even more. 

• When only one mobile is away from its home 
network, it will act as a mobile while the other one 
will perform correspondent node operations. In this 
case: 

One MIPv6 tunnel will be needed to communicate 
(mipv6_route_optimization_enabled). 

Just one MIPv6 extension header (at a given time) will be 
used to transport the data traffic when using route optimization 
mechanism (mipv6_route_optimization_disabled). 

Fig. 3 represents the result of MIPv6 traffic. 

Fig. 4 shows the packet delay variation in cases enable and 
disable routing optimized. Variance among end to end delays 
for video packets received by this node. End to end delay for a 
video packet is measured from the time it is created to the time 
it is received. The packet delay variation is 2.5 in optimized 
enable routing that is less than optimized disable routing. 

3) Visited access points 

Under this statistic panel it is possible to observe all access 
points that were visited by both mobiles. Each bar in the graph 
represents an access point visited by the mobiles, and the bar 
width represents the time the mobile used the access point 
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until it move to a different one. The colors of the bars have 
been set so each one identifies one of the four access points 
according to the color of the annotation circle placed at the 
access point's position. Fig. 5 shows the visited access points. 

III. Scenario 2 (roaming capability in mipv6) 

This scenario utilizes 802.11b WLAN interface with 
roaming capability to simulate hand-offs between mobile IP 
agents who are also WLAN access points. Here are some 
configuration specifics you have to follow to use WLAN 
roaming capability. 

• Wireless Lan Parameters. BSS Identifier should be 
explicitly set on all the WLAN nodes in the network. 

• There should be only one access point for a BSS 
network (Wireless LAN Parameters. Access Point 
Functionality) 

• 802.11b uses the following physical attribute values: 
Wireless Lan Parameters. Data Rate (bps) — 11Mbps 
Wireless Lan Parameters. Physical Characteristics — 
Direct Sequence 

• IP auto addressing scheme will assign IP addresses 
based on the BSS ID, i.e. all the WLAN nodes 
sharing the same BSS ID will be assigned an IP 
addresses from the same IP network. 

The Mobile IP NET is a mobile subnet containing a mobile 
router and a client node. The mobile router node uses the 
mobile IP home agent service from the HA WLAN router. The 
MR in mobile subnet is manually configured with common 
BSS ID and IP network address as that of the HA WLAN 
router. All the foreign agents are also WLAN routers with 
different BSS Identifiers. 

Table III and IV summarize the simulation parameters and 
the network parameters, respectively. 



TABLE HI. 


SIMULATION PARAMETER 


Parameters 


Values 


Network type 


Campus 


Network Dimension 


55 km*55 km 


Technologies 


RPG, Wirelesslan , Ethernet , MIPv6 


Domain Quantity 


4 


Module Radius 


1 km 


Simulation time 


14minute and 59 second 



TABLE IV. NETWORK PARAMETER 



Parameters 


Values 


Routers Quantity 


5 


Routers technology 


SLIP , Ethernet .Wirelesslan 


Routers data rate 


1 1 Mbps 


RPG Traffic rate 


1 pkt/sec 


100BaseT data rate 


100 Mbps 


Service 


Best Effort 


Workstation Quantity 


2 


Workstation packet size 


512b 


Workstation Memory 


16MB 


Flow type of ip-traffic-flow 


Aggregate 



A. Simulation Scenario 2 

The Mipv6 network, which simulated in this scenario, 
inclusive a mobile subnet that has a mobile router and client 
node. This scenario represented in fig. 6. In figure 6 the 
mobile subnet first stands in home domain. When simulation 
starts the packet which exchanges between RPG-Server and 
RPG-Client is serving via HA. The mobile subnet gently 
moves, when approaching the first neighbor domain, MR 
sends BU massage to HA and HA responses with BA 
massage. If update is allow, starts transmittal with new 
domain. Hereinafter the packet transmitted by server outset 
goes to HA and then transmission to FA and achieve to client 
in mobile subnet. 




(b) 

Figure 6. Simulated scenario 2: (a): Network, (b): Subnet 



B. Simulation Result For Scenario 2 

The RPG-Server node sends traffic to the RPG-Client. As 
the mobile subnet moves along the trajectory, it changes the 
access point and changes the mobile agent as well. The 
packets will be tunneled to different foreign agents as the 
mobile node changes its access points. Fig. 7 shows the 
tunneled traffic sent for HA and the tunneled traffic received 
for FAs. 

As mobile subnet is move at trajectory RPG-Server send 
traffic to RPG-Client. Traffic sent is Total number of all RPG 
packet bits sent per second by this node to other RPG nodes in 
the network and traffic received is Total number of RPG 
packet bits received per second by this node from all other 
RPG packet sources in the network. Fig. 8 shows the Traffic 
sent by RPG-Server and traffic received by RPG-Client. 
Fig. 9 shows throughput at various domains, which is namely 
total data traffic in bits/sec successfully received and 
forwarded to the higher layer by the WLAN MAC. This 
statistic does not include the data frames that are 
1) unicast frames addressed to another MAC, 2) duplicates of 
previously received frames, and 3) incomplete, meaning that 
not all the fragments of the frame were received within a 
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certain time, so that the received fragments had to be 
discarded without fully reassembling the higher layer packet. 

Fig. 10 represents the media access delay that is namely 
the total of queuing and contention delays of the data, 
management, delayed Block-ACK and Block-ACK Request 
frames transmitted by the WLAN MAC. For each frame, this 
delay is calculated as the duration from the time when it is 
inserted into the transmission queue, which is arrival time for 
higher layer data packets and creation time for all other frames 
types, until the time when the frame is sent to the physical 
layer for the first time. Hence, it also includes the period for 
the successful RTS/CTS exchange, if this exchange is used 
prior to the transmission of that frame. Similarly, it may also 
include multiple number of back off periods, if the MAC is 
802. lie-capable and the initial transmission of the frame is 
delayed due to one or more internal collisions. 

IV. Conclusion 

In scenario 1 has been perusing the effect of mipv6 route 
optimization on delay, sent and received traffic, tunneled 
traffic in MIPv6, delay and traffic for video conferencing. We 
perceive that with proper routing, situation of all of the traffics 
improve to a considerable extent. Even in optimal routing the 
incision in communication, was much less. In the other hand, 
delay and Video packet delay dispersion slake to a 
considerable extent. 

The problem considered in Scenario 2, is the mobile 
roaming in the MIPv6 network. It was observed that, 
whenever the mobile enters to a new AP, traffic just has been 
tunneling for that AP. E.g. sending traffic of HA is totally of 
receiving traffic by FAs. Also media access delay in HA is 
more than FAs. 
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Figure 5. (a) Active access point for MN-A 




Figure 5. (b) Active access point for MN-B 
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Figure 7. (a): stacked, The tunneled traffic sent for 
HA and the tunneled traffic received for FAs 
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Figure 8. (a): stacked, 
Traffic sent by RPG-Server and traffic received 
by RPG-Client 
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Figure 8. (b): overlaid, 
Traffic sent by RPG-Server and traffic received 
by RPG-Client 
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Figure 9. (a): stacked, WLAN throughput at 
various domain 
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Figure 9. (b): overlaid, WLAN throughput at 
various domain 




Figure 10. (a): stacked, The media access delay 



Figure 10. (b): overlaid, The media access delay 



Figure 7. (b): overlaid, The tunneled traffic sent 
for HA and the tunneled traffic received for FAs 
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Abstract-Wireless sensor networks (WSN) may consist of several 
to thousands of sensors that share the need to organize for 
network data collection sink routing. This paper addressed the 
problems of tracking moving of wireless sensor network objects. 
The traditional tracking method, called Dynamic Convoy Tree- 
Based Collaboration (DCTC) presented. In additional describe a 
method, called Distributed computation of Voronoi cells in 
sensor networks. Proposed solutions of WSNs challenges using 
converge cast traffic, covering networks configuration and 
efficient routing routines. We also present the intermediate 
routing sensor nodes expend an excessive amount of their energy 
resources, thus can achieve superior tracking accuracy with 
faster tracking convergence speed and reducing the network 
lifetime. 

Index Terms - DCTC, Voronoi, Tracking 

I. Introduction 

Wireless sensor networks in any applications are 
used to gather intelligence about field conditions. 
Monitoring the activity or assess conditions and influences. 
A major requirement for any applications sensor networks 
is to reliably aggregate and disseminate information within 
a time frame that allows the command control to take 
necessary tactical decisions. This calls for communication 
systems that can provide high data rates with high 
reliability while using minimum bandwidth and power. In 
other words, the underlying communication network must 
be robust, reliable, and scalable. The choice of network 
architecture (topology) has strong influence on the 
effectiveness of the tactical applications in wireless any 
application sensor networks. Network architecture affects 
network characteristics such as latency, robustness, and 
capacity [1,2,3]. 

Almost all of the common applications require 
knowledge of the position of the car to work properly. Even 
when no applications directly take benefit of the car park, 
can the underlying data dissemination protocols take 
Feature a lot of this information [4]. To example, 
geocasting and guidance geographical dependence on the 
car and are desirable for many of the scenarios and be more 
suitable for applications Voronoi region is less than 6 proof. 
By the Euler formula [5,6] 

The complexity of data routing and processing (data 
fusion) also depends on the topology. In this paper will be 
fined how to route packets efficiently in networks is an 



interesting and challenging research topic. 

The rest of the paper is organized as follows. In the 
next section, we briefly outline the princebles of voronoi 
methods. In Section III, we describe the proposed algorithm. 
Simulation results are presented and discussed in Section 
IV. Finally, we conclude in Section V. 

II. Principels of VORONOI Methods 

Static point Voronoi tessellations are well known in the 
literature, and algorithms have been used for many years 
(see [7] for a summary). Less well known are dynamic 
algorithms, that allow point creation, deletion and 
movement, and also Voronoi tessellations of more complex 
objects - typically line segments as well as points. 
Algorithms for generating the simple point Voronoi 
tessellation have improved significantly in theoretical 
efficiency in recent years. Where the whole structure may 
be constructed at once, randomized incremental algorithms 
such as [8,9] can create these diagrams in expected time 
0(n log n), which is optimal. However, as a major 
motivation for this work concerned the maintaining of a 
map when one or more objects are moving, an alternative 
technique was developed that maintained the Voronoi 
spatial relationships while map objects were being inserted, 
deleted, or displaced. This is achieved by determining when 
the Voronoi cell of a moving point gains or loses a 
neighbouring cell, moving the point to that location, and 
locally updating the topological structure accordingly. For 
the case of all points moving simultaneously, [10] give a 
rather complex theoretical efficiency based on Davenport- 
Schinzel sequences, but in the case of one point being 
inserted at a time by splitting it from the nearest pre- 
existing point and then moving it to its destination (see 
below) the expected time efficiency should again 
approximate 0(n log n)The WSN of active sensors suffers 
from serious inter-sensor in- terference and imposes new 
design and implementation challenges. Show that the 
adaptive sensor scheduling scheme can achieve superior 
tracking accuracy with faster tracking convergence speed. 

The concept of the Voronoi diagram [7], a well- 
known construct from computational geometry, is used to 
find a maximal breach path in a sensing field. In two 
dimensions, the Voronoi diagram of a set of discrete points 
(also called sites) divides the plane into a set of convex 
polygons, such that all points inside a polygon are closest to 
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only one point. In Figure la, 10 randomly placed nodes 
divide the bounded rectangular region into 10 convex 
polygons, referred to as Voronoi polygons. Any two nodes 
si and sj are called Voronoi neighbors of each other if their 
polygons share a common edge. The edges of a Voronoi 
polygon for node si are the perpendicular bisectors of the 
lines connecting si and its Voronoi neighbors. Since by 
construction, the line segments in a Voronoi diagram 
maximize the distance from the closest sites, the maximal 
breach path must lie along the Voronoi edges. If it does not, 
then any other path that deviates from the Voronoi edges 
would 




(a) (b) 
Figure I. (a) Voronoi diagram of 10 randomly are deployed nodes; (b) 
Voronoi polygon for node S, constructed by drawing perpendicular bisectors 
of the lines connecting S and its neighbors. 

Issues in wireless sensing networks are network 
architecture design and data routing. Hence, several 
researchers have addressed the issue of communication 
jamming in a wireless sensor network and its effect on the 
performance of the network. Xu et al. [11,12] discuss radio 
interference attacks on wireless sensor networks. They study 
the feasibility and effectiveness of jamming attacks on 
wireless networks and examine the critical issue of detecting 
the presence of jamming attacks. They also propose four 
different jamming attack models that can be used by an 
adversary to disable the operation of a wireless network, and 
evaluate their effectiveness in terms of how each method 
affects the ability of a wireless node to send and receive 
packets. 

III. Target Tracking Using Sensor Networks 

Target tracking has been a classical problem since the early 
years of electrical systems. Sittler, in 1964, gave a formal 
description of the multiple -target tracking (MTT) problem 
[11]. The goal of the MTT problem is to find the moving path 
for each target in the field. Target tracking using a sensor 
network was initially investigated 2004 [13]. With the 
advances in the fabrication technologies that integrate the 
sensing and the wireless communication technologies, tiny 
sensor motes can be densely deployed in the desired field to 
form a large-scale wireless sensor network. Challenges and 
difficulties, however, also exist in a target tracking sensor 
network: 

1) Tracking needs collaborative communication and 
computation among multiple sensors. 

2) Each sensor node has very limited processing power. 

3) Each node also has tight budget on energy source. Thus, 



A) 



for data processing and tracking should consider the 
impact of power saving mode in each node. 

Different Approaches of Target Tracking 



The method will need to handle a large number of moving 
objects at once. While our method uses a hierarchy to connect 
the sensors: 

1) The leaves are sensors 

2) the querying point as the root 

3) the other nodes are communication nodes 

The main idea of STUN is showed in the example figure 2 
showed that the message-pruning hierarchy .Considerthe 
those detection messages from sensors that detected the 
arrival of the car. Sensors A's message will update the 
detected sets of all its ancestors. The message from sensors B 
and D do no update the detected sets of their parents and thus 
will be pruned at X. The main advantage of STUN Message 
pruning and routing routing while the disadvantage Building 
the tree (the structures of the tree). 




A\ /AN 



figure 2 is a message-pruning hierarchy 

B) Tracking Tree Management Dynamic Convoy Tree- 
Based Collaboration (DCTC) 

A dynamic convoy tree-based collaboration (DCTC) 
framework for tracking a mobile target is proposed in [14]. 
Heuristics are used to predict the object's moving direction. A 
dynamic tree is then created by adding or pruning the sensors 
near the moving target. The root of the tree can dynamically 
refine the readings gathered from various tree nodes. 

Since the coverage area of individual sensor nodes 
usually overlaps, the work in [15] attempts to periodically 
search the smallest subset of nodes that covers the monitoring 
area. This group of nodes is referred to as the area-dominating 
set. A distributed spanning tree, induced by the initial interest 
flood over the area-dominating set, is used to aggregate the 
reply messages from various event sources. DCTC relies on a 
tree structure called"convoy tree". The tree is dynamically 
configured to add some nodes and prune some nodes as the 
target moves that DCTC-main idea. This paper studies the 
Efficient of detecting and tracking a mobile target, and 
monitoring a particular region surrounding the target in sensor 
networks. Figure 3 showed that the sensor nodes surrounding 
an adversary tank detect and track the tank and its 
surrounding area which may include enemy surrounding area. 
DCTC relies on a tree structure called convoy treel, which 
includes sensor nodes around the moving target, and the tree 
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is dynamically configured to add some nodes and prune some 
nodes as the target moves. Figure 1 illustrates how to use the 
convoy tree to track a mobile target. As the target first enters 
the detection region, sensor nodes that can detect the target 
collaborate with each other to select a root and construct an 
initial convoy tree. Relying on the convoy tree, the roots 
collect information from the sensor nodes and refine this 
information to obtain more complete and accurate information 
about the target using some classification algorithms [16, 17]. 

The region around it in an energy efficient way, and the 
network should forward this information to the sinks in a fast 
and energy efficient way. The data report can be saved locally 
waiting for other node's query, or can be forwarded to single 
or multiple data centers (the sinks), which can be a static 
command center or moving soldiers. As the sensor nodes 
surrounding the moving target should promptly provide robust 
and reliable status information about the mobile target and 
design goals. Such as is tracking an important target (e.g., an 
important person) in a parade. As design goals, moving target 
should promptly provide robust. The data report can be saved 
locally waiting for other node's query, or can be forwarded to 
single or multiple data centers (the sinks), which can be 
efficient way, and the network should forward well as its 
surrounding area, and one of them (i.e., the root) generates a 
data report. 

This is information to the sinks in a fast and energy 
efficient way. DCTC is a framework to detect and track the 
mobile target and monitor its soldiers. These nodes 
collaborate among themselves to aggregate data about the 
tank. 

IV. Simulation and Results Disscution 

Scenario: 200 — > 1000 sensor nodes are thrown randomly in 
area of 640m x 540m. Each node has 2J (2*10 A 6 pJ) of 
energy with sensing radius = 30m and communication radius 
= 60m. Intruder objects are supposed moving specific paths. 
No data aggregation is allowed. The Utilized tools and 
module descriptions as a tools of OMNET++, C#, and Matlab 



The module description under OMNET++: Layer 0 module: 
Represented for physical layer. It consists of gates (in/out) 
and be responsible for making connection between the node 
and its neighbors. Its behaviors include forward messages 
from higher layer to its neighbors and vice versa .MAC 
module: Represented for pre-processing packet layers. It 
consists of gates (in/out) and queues (incoming queue and 
outgoing queue). When the queue is full, it deletes some latest 
messages to make sure that there is enough room in the queue 
for new messages. It helps to evaluate performance of the 
node. (Note: In current simulation, this module is temporary 
eliminated to speech up the performance) Application module: 
Represented for application layer consisting of gates (in/out). 
Note that, at anytime, after sending a message, the module 
automatically sends a decrease_energy message to energy 
module (through the coordinator) to let the module decrease 
the energy by one unit. Coordinator module: an interface to 
connect all modules together. It categories incoming messages 
to delivery them to the right module. For example, when 
receiving a decrease_energy message, it will forward the 
message to energy module. sensor module: represented for 
sensor board in a sensor node, if sensor_switch parameter is 
"on" (set to 1), the module consumes energy, so, after an 
interval (timer), the module send decrease_energy message to 
the energy module (through the coordinator). When the timer 
ticks, the waiting timer decreases. The waiting timer is set by 
sensor_refresh messages from application module, if the 
waiting timer is zero, the module will turn "off 
(sensor_switch parameter is set to 0). Radio module: 
represented for the radio board in a sensor node, if 
radio_switch parameter is "on" (set to 1), the module 
consumes energy, so, after an interval (timer), the module 
send decrease_energy message to the energy module (through 
the coordinator). Energy module: represented for battery in a 
sensor node, at the beginning, each sensor node is set to a 
specific energy level (energy parameter), if the module 
receives a decrease_energy message, it decreases the energy 
level by one. 




Figure 3: Adding and pruning nodes for the convoy tree in the DCTC scheme: 
(a) Convoy tree at current time; (b) and (c) convoy tree at next time. 
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Figure 4: DCTC and Voronoi Routing 
We found that the DCTC had a very small increase in routing overhead than using voronoi as 
shown in Figure 1, because of delayed receipt of route reply by the source nodes. 



I. Conclusions 

However, each sensor mote has limited capabilities in terms of 
power, sensing, and processing abilities. Therefore, 
comprehensive and accurate data can be obtained only through 
the collaboration of sensor nodes in the network as a single node 
does not have the capability to provide this information. We 
have discussed the importance of coverage and connectivity, 
Which are two fundamental factors for ensuring efficient 
resource management in wireless sensor networks, and surveyed 
various methods and protocols, which are optimally cover a 
sensing field while maintaining global network connectivity at 
the same time. 
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Abstract — Technical security metrics provide measurements in 
ensuring the effectiveness of technical security controls or 
technology devices/objects that are used in protecting the 
information systems. However, lack of understanding and 
method to develop the technical security metrics may lead to 
unachievable security control objectives and incompetence of the 
implementation. This paper proposes a model of technical 
security metric to measure the effectiveness of network security 
management. The measurement is based on the effectiveness of 
security performance for (1) network security controls such as 
firewall, Intrusion Detection Prevention System (IDPS), switch, 
wireless access point, wireless controllers and network 
architecture; and (2) network services such as Hypertext 
Transfer Protocol Secure (HTTPS) and virtual private network 
(VPN). We use the Goal-Question-Metric (GQM) paradigm [1] 
which links the measurement goals to measurement questions 
and produce the metrics that can easily be interpreted in 
compliance with the requirements. The outcome of this research 
method is the introduction of network security management 
metric as an attribute to the Technical Security Metric (TSM) 
model. Apparently, the proposed TSM model may provide 
guidance for organizations in complying with effective 
measurement requirements of ISO/IEC 27001 Information 
Security Management System (ISMS) standard. The proposed 
model will provide a comprehensive measurement and guidance 
to support the use of ISO/IEC 27004 ISMS Measurement 
template. 

Keywords- Security metrics; Technical security metrics model; 
Measurement; Goal-Question-Metric (GQM); Effective 
measurement; Network security management 

I. Introduction (Heading 1 ) 

Network security is defined as the security of devices, 
security of management activities related to the devices, 
applications/services, and end-users, in addition to security of 
the information being transferred across the communication 
links [2]. How much protection is required in ensuring the use 
of information and associated networks to conduct the business 
are well managed? How to identify and analyze network 
security controls to mitigate the network security risks? These 
questions have derived to implement and maintain secure and 
functional network is absolutely critical to the success of any 
organization's business operations [2][3]. Thus, it is important 



to measure network security effectiveness in handling the risks 
from the current threats, vulnerabilities and attacks. 

According to [4], the practical challenges and issues are 
what to measure and what information to report in facilitates 
the senior management for any decision making. Obviously, 
the reported information is often based on what is easier to 
measure instead of what is actually meaningful strategically 
[5], [6], [7]. Does network security management is among the 
"easier" information to measure? 

Some organizations may be reported the measures from out 
of context perspective, without a baseline for comparison, or 
present simple measurements that do not show any kind of 
correlation, which greatly (or even completely) limits the value 
of the reported information [5][8]. 

A. Requirements From ISO/IEC 27001 ISMS Standard 

ISO/IEC 27001:2005 Information Security Management 
System (ISMS) [9] is intended to bring formal specification of 
information security under explicit management control. It is a 
mandated specific requirement, where organizations can 
therefore be formally audited and certified compliant with the 
standard. 

The standard provides some confidence level of 
information protection among business organizations. With the 
existence of ISO/IEC 27001 ISMS certification, these 
organizations can increase their protection of information by 
having independent assessment conducted by the accredited 
certification body. The certificate has proven the potential 
marketing to the most business organizations, where a total of 
7536 organizations have already been certified worldwide [10]. 
Obviously, there are other 27000 series that support this 
standard, including ISO/IEC 27002 Code of practice for 
information security management [11], ISO/IEC 27003 ISMS 
implementation guidance [12], ISO/IEC 27004 Information 
security management - Measurement [13] and ISO/IEC 27005 
Information security risk management [14]. 

There are 133 security controls in Annex-A of ISO/IEC 
27001 ISMS standard. ISO/IEC 27002 [11] provides the best 
practice guidance in initiating, implementing or maintaining the 
security control in the ISMS. This standard regards that "not all 
of the controls and guidance in this code of practice may be 
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applicable and additional controls and guidelines not included 
in this standard may be required." 

Information security measurement is a mandatory 
requirement in this standard where a few clauses are stated in 
[9]: 

"4.2.2(d) Define how to measure the effectiveness of 
the selected controls or groups of controls and specify 
how these measurements are to be used to assess 
control effectiveness to produce comparable and 
reproducible results; 

• 4.2.3(c) Measure the effectiveness of controls to verify 
that security requirements have been met; 

4.3.1(g) documented procedures needed by the 
organization to ensure the effective planning, 
operation and control of its information security 
processes and describe how to measure the 
effectiveness of controls; 

7.2(f) results from effectiveness measurements; and 

7.3(e) Improvement to how the effectiveness of 
controls is being measured." 

Moreover, the new revision of ISO/IEC 27001:2013 [15] 
standard has also highlighted the importance of effective 
measurement in their mandatory requirement clauses 9 - 
Performance evaluation. 

B. Summary 

The standard highlighted that the organization must 
evaluate the information security performance and the 
effectiveness of the ISMS. The evaluation of the effectiveness 
should include but not limited to: (i) monitor and measure 
information security processes and controls; (ii) methods to use 
when monitor and analyze measurement for valid or significant 
result; (iii) time and personnel to perform the monitoring a nd 
measurement; (iv) determine time, duration and personnel to 
analyze the measurement results. 

Thus, in ensuring the ISMS effectiveness, the information 
security measure can facilitate the management to make 
decision by the collection, analysis, evaluation and reporting of 
relevant performance-related measurements. 

The importance of information security measurement is 
well defined and highlighted in both standards. Most of the 
research papers focused on information security metrics for 
general IT systems. However, lack of research on technical 
security metrics [16][17][18][19]. Thus, our research is 
focusing on the development of technical security measurement 
that will be incorporated in the technical security metric model. 

II. Related work 

In understanding the requirements, the security metric, 
measure and effective measurement must be defined. 



"Whatever the driver for implementing ISO 27001, it should no 
longer be just about identifying the controls to be implemented 
(based on the risk), but also about how each control will be 
measured. After all, if you can't measure it, how do you know 
it's working effectively?" [20]. 

In our previous study [21], we defined information security 
metrics is a measurement standard for information security 
controls that can be quantified and reviewed to meet the 
security objectives. It facilitates the relevant actions for 
improvement, provide decision making and guide compliancy 
to security standards. Information security measurement is a 
process of measuring or assessing the effectiveness of 
information security controls that can be described by the 
relevant measurement methods to quantify the data and the 
measurement results are comparable and reproducible. 

Apparently, we also mapped the definitions of security 
metric, security measure and effective measurement from the 
previous studies 
[5][6][20][22][23][24][25][16][26][17][27][28][29] 
[30][18][31][32][33][19][34] (refer to Table 1). 

From Table I, we grouped the eight (8) components of 
security metrics and supported by the components in security 
measures. The definitions of security metric and security 
measures are quite similar through the analysis of the 
descriptions. To ease the understanding, the metric is also 
sometimes called a "measure" [27]. However, in the 
development of TSMM, we intend to develop a security metric 
that can consist of a few security measures. 

We also derived the eight (8) criteria of the effective 
security metric (ESM) that are supported by the following 
statement: 

a) Meet security objectives - ESM should gauge how 
well organization is meeting its security objectives. It 
should also have a clearly defined set of variables 
which are acceptable, unacceptable and excellent 
range of values that can be easily identified by the 
audience to which the measure is communicated. 

b) Quantifiable values - ESM should be a quantitatively 
measurable that derived from precise and reliable 
numeric values and expressed by using understood 
and unambiguous units of measure. 

c) Simple measurement - ESM should be easily 
recognize and comprehended by the audience for 
which they are intended. The measurement method 
should be produced by a process or procedure to 
collect data, determine the data source, scale or score, 
analysis, and reporting of relevant data. The right and 
competent personnel should be identified to conduct 
the measurement and able to analyze and produce the 
accurate report. 
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TABLE I. A MATRIX MAPPINGS THE DEFINITIONS OF SECURITY METRICS, SECURITY MEASURES AND EFFECTIVE MEASUREMENT 



Security Metric 


Security Measure 


Effective Measurement 


(1) Security Objectives 

• Identify the adequacy 
of security controls 


• Clearly defined acceptable 
value 

• Performance goals and 
objectives (efficiency, 

^ll^V LI V t'llv'33 1 


• Meet security objectives and 
requirements 

• Clearly defined 


(2) Quantifiable, computed value 


• Quantifiable information 

• Scope of measurement 
(Process, performance, 
outcomes, quality, trends, 

cnnfftrrnQticn tr> ctcin/itir/ic nn/1 
CUlllUllllallCC LU aUUlUalUa allU 

probabilities) 


• The value is objective and 
quantifiable 

• Determine the Key-Performance- 
Indicator (KPI) 


(3) Method of Measurement 

• Process of data 
collection, data from 
security assessment 
process 


• Easily identified 

• Quantitative indications by 
some attributes of a control or 
process 


• Simple measurement 

• Low cost and easy access 

• Capability to measure accurately 


(4) Analysis of Data 

• Comparable to a scale/ 
benchmark/Predetermi 
ned baseline 

• Repeatable 


• Apply formulas for analysis 

• Track changes 

• Onanti fi ahlp infnrmatinn fnr 

comparison 


• Consistent value 

• Accurate time and data 

• r^nmnnrcihlf 3 anH rpnrnHiipihlp 

results 

• Security controls are implemented 
correctly, operating as intended, and 
meeting the desired outcome. 


( S\ Seciiritv 

Indicator/Characteristics 

• Meaningful result 
(score, rating, rank, or 
assessment result) 


• A^nnitnr trip arfnmnlicnrnpnt 

• IVJUJlll IAJ1 lilt tJv-v-VJllIU llOlllllv^lll 


• Tnrrpncp cnnfinpncf 1 IpvpI 

• Securitv imnrovement 


(6) Reporting relevant data 


• Communicated/Reported 

• Intended audience 


• Present to targeted audience/ 
Stakeholder 


(7) Decision making 


• Facilitate decision making 


• Facilitate corrective action 


(8) Requirement to Standard, 
regulatory, financial and 
organizational reasons 




• Align with business goals and 
regulations 



Comparable result - ESM should produce a baseline 
for comparison purposes, repeatable or consistently 
reproducible, so that different people at different 
times can make the same measurement. Apparently, 
this supports the adequacy of in-place security 
controls, policies, and procedures; security controls 
are implemented correctly, operating as intended, and 
meeting the desired outcome. 

Corrective action - ESM should provide the 
appropriate timeliness and frequency of measurement 
for the change of measurement target so that the 
latency of measures does not defeat their purpose. 
ESM should be collected and reported in a consistent 
manner. ESM should provide the management to 
decide the new investment in additional information 
security resources, identify and evaluate non- 



productive security controls, and prioritize security 
controls for continuous monitoring. 

f) Targeted audience/Stakeholder - ESM should be 
easily identified by the audience/stakeholder to whom 
the measure is communicated. For example, provide 
the relevant measures that produce the significant 
result for the management to make decision. 

g) Security Improvement - ESM should provide some 
indicators that could be a sign of relevant security 
characteristics that prescribes the meaning of obtained 
security values and achieves to some level of 
improvement. 

h) Align with business goals - ESM should provide a 
benefit to the business it supports. 

The development of our TSMM is based on the above 
criteria and to focus on security performance for the relevant 
controls (see Fig. 1). 
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Figure 1 . Eight Criteria of Effective Security Metric 



III. Research Method for Development Of Technical 
Security Metric Model (TSMM) 

The GQM approach was originally developed by Basili 
et.al [1] in evaluation and measurement of software 
products and development processes. Ever since developed, 
this approach was used consistently focus on the software 
measurement and processes [35]. There were also a few 
research studies on business processes [36][37][38] and 
security metrics [26][39][40][41][42][43][44]. However, 
there is no research study conducted for measuring the 
network security management using the same approach. 

To achieve the objective of developing the TSMM, we 
propose a research method based on a combination of 



approaches. The outcome of this research method is the 
introduction of network security management metrics as 
attributes to the TSMM. 

The first approach is to define the technical security 
metric (TSM). We set our goal to meet the requirements 
from ISO/IEC 27001 ISMS standard. The paradigm of 
Goal-Question-Metric (GQM) [1] is used and described 
further which to align with standard requirement (Fig. 2). 

We combine the developed Goal-Question-Metric 
(GQM) paradigm and data of literature review (Fig. 3) as a 
first step. This approach is used for developing the initial 
TSM in a top-down manner, from general objective to the 
relevant metrics or outputs and combines the inputs from 
the literature review. The application results in GQM 
models, leading to the initial TSMM. However, this initial 
development work remains subjective and potentially 
incomplete. 

In the second approach (Step 2), we use the GQM 
method consists of four phases [45]: planning, definition, 
data collection, interpretation (see Fig. 4). The explanation 
of these phases is based on the compliancy to the 
requirement controls of ISO/IEC 27001 standard [9] for 
A.10.6 Network security management (NSM); A. 10.6.1 
Network controls; and A. 10.6.2 Secure network services. 

Our implementation adopts the processes and activities 
by [41] and [46]. 




Figure 2. Eight Criteria of Effective Security Metric 



• The Planning phase: The NSM-team is established 
and the compliance requirement is clearly delivered. 
The desired improvement areas such as performance, 
security and monitor are identified. The team selects 
and characterizes the products or controls to be studied. 
The result of this phase is a project plan that outlines 
the characterization of the products or controls, the 
schedule of measuring, the organizational structure, 
and necessary awareness and training for people 
involved in measurements. 



• The Definition phase: The measurement goals are 
defined. This phase is also to identify and analyze the 
perception and understanding of effective measurement 
requirement from ISO/IEC 27001 standard [9]. We 
will create a new template to gather all related 
information based on some other templates from 
ISO/IEC 27004 [13] andNIST SP800-55 [27]. For the 
purpose of this, the interviews may be conducted with 
people (management and technical) involved in the 
process or product under study. Based on the goals, 
relevant questions are developed to identify the 
specific quality attributes and to re -define the goals 
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precisely. For each question a hypothesis with an 
expected answer should be defined. Next, the metrics 
are defined for each question and checked on 
consistency and completeness. Results of this phase are 
an analysis of compliance plan and a measurement 
plan. 

• The Data Collection phase - the team is required to 
prepare the data collection within their knowledge and 
availability. The data may be extracted manually or 
electronically and may involve automated data 
collection tools. Results of this phase are to develop the 



data support system consisting of spreadsheets, 
statistical tools, database applications and presentation 
tools. 

• The Interpretation phase - the collected data is 
processed and analyzed according to the metrics 
defined. The measurements result should be able to 
answer the questions, and with the answers it can be 
evaluated if the initial goals are attained. Moreover, the 
measurement result should provide some values that 
describing the performance measurement of the 
security controls. 




Figure 4. The four phases of GQM-method [45] 



The second approach is used as a validation/improvement 
of the first step. It is based on a literature review of security 
metric standards and guidelines and measurement methods for 
network security controls. This approach is a bottom-up, being 
an analysis of the literature to identify the metrics currently 
used. A comparative analysis is developed between the metrics 
and those defined through GQM. This comparison is 
summarized in an analysis table. 

As shown in Fig. 5, we map the GQM-method with 
ISO/IEC 27004 template for an information security 
measurement construct and show the synchronization link 



(relevant colored-box). We refer to this standard as a reference 
and example to form a GQM-Measurement plan. 

Once the literature is completely surveyed, the development 
of GQM-Measurement plan should be ready. The relevant 
people should be interviewed to validate the initial TSMM. 
Finally, the TSMM is accordingly revised. 
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A. GQM-Measurement Plan 

We develop a GQM-Measurement plan consists of goals, 
questions, and metrics in a hierarchical structure (see Fig. 6) 
based on [1][45]. 

In developing the goals, the security objectives of A. 10.6, 
A. 10.6.1 and A. 10.6.2 of ISO/IEC 27001 requirement controls 
[9] are referred. At this stage, the understanding of the security 
control requirements is very important. The understanding can 
be obtained through the interview with the relevant people and 
checking available process or product descriptions [46]. If 
goals are still unclear, a reference to ISO/IEC 27002 [11], FDIS 
ISO/IEC 27033 [2] andNIST SP800-55 [25] can also assist. 



The proposed questions shall refine the goals make them 
operational enough so that it would not create difficulties to 
reveal the relationship to the collected data and ease the 
interpretation of the answers towards the goals [46]. The 
questions are also derived from the literature reviews. 

The questions are stated in a quantitative way where data 
can be collected by measurements. We provide the expected 
answers to the questions and formulated as hypotheses. 
Through hypotheses, we can learn the effect from 
measurements and compare the knowledge before and after 
measurements. 
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Figure 6. The GQM Paradigm by Basili et.al [ 1 ] 



According to [1][41][46], we can define several metrics for 
each question. It is also possible that one metric may be used to 
answer different questions under the same goal. We choose 
metrics with quantitative level making it possible to assign 
numbers to a quality attribute. Metrics are defined to answer 
the relevant questions and should be able to support or reject 
the stated hypotheses (if any). 

A simple Goal-Measurement plan is developed for the 
purpose of this discussion (as full development of plan is 
currently in progress). The example of GQM-Measurement 
plan as stated in Table II. 



TABLE II. 



Example of GQM-Measurement Plan 



Goal 


Gl 


A. 10.6.1 Network controls - Networks 

shall be adequately managed and 
controlled, in order to be protected from 
threats, and to maintain security for the 
systems and applications using the 
network, including information in transit. 


Question 


Ql 


What are the risk levels for network 
controls and security controls that protect 
your information? 


Metric 


Ml.l 


Risk Assessment = Asset Value x Threat 
x Vulnerability 


Question 


Q2 


What are the monitoring mechanisms 
that your organization has? 


Metric 


M2.1 


Frequency of audit logging review 


Metric 


M2.2 


Security Incidents report (IDS/IPS/user 
report) - Comparison of number of total 
incidents with the threshold. 


Question 


Q3 


How often the security assessment 
and/or penetration testing are conducted 
within a year? 


Metric 


M3.1 


Frequency of assessment conducted 


Metric 


M3.2 


Success or failure rate for corrective 
action 


Metric 


M3.3 


Conducted by trained/experience staff 


Question 


Q4 


How often your organization conduct the 
security updates for network controls? 
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Metric 


M4.1 


Success and failure rates of security 
updates 


Metric 


M4.2 


Frequency/periodic of maintenance 


Question 


Q5 


Who is responsible to ensure the 
effectiveness of network controls is 
intact? 


Metric 


M5.1 


Rate of understanding the job description 


Metric 


M5.2 


Qualification, Training and Education 
attended 


Question 


Q6 


What are the authentication mechanism 
in accessing the network and systems 
used in your organization? 


Metric 


M6.1 


Password quality - manual (Number of 
passwords which satisfy organization's 
password quality policy for each user) 


Metric 


M6.2 


Password quality - automated 


Metric 


M6.3 


Number of password being shared? 


Metric 


M6.4 


Ratio of passwords crackable within 4 
hours. 


Question 


Q7 


Who is responsible to ensure the 
effectiveness of network controls is 
intact? 


Metric 


M7.1 


Rate of understanding the job function 


Metric 


M7.2 


Qualification, Training and Education 
attended 


Metric 


M7.3 


Ratio of responsible personnel to total 
number of staff 


Question 


Q8 


What are the mechanism used to 
authorize the relevant users to access the 
networks and systems? 


Metric 


M8.1 


Number of restricted access methods 
(network segment, IP address, MAC 
address, firewall, etc.) 



IV. Conclusion and Future Work 

The objective of this paper is to identify and to define a set 
of metrics for the TSMM with a systematic and scientific 
approach to comply with ISO/IEC 27001 standard. We use the 
GQM approach on the TSMM and review with regards to the 
literature. The result of this paper is the enrichment of the 
TSMM with suited network security management metrics. 

Although the initial developed TSMM are validated 
through literature analysis, their testing in a real case would 
provide a concrete instantiation and validation of their 
relevance. The GQM-Measurement plan is currently being 
developed to suit the security objectives. The validation will be 
conducted with the network security experts. 

As part of the next step of our future work, the metrics will 
be integrated into the initial TSMM and a case study is to be 
conducted using our GQM-Measurement plan. This will 
validate the final TSMM. 
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Abstract: 

The capability to provide network service even 
under a significant network system element 
disruption is the backbone for the survival of 
network technology in today's world, keeping 
this view in mind, the present paper highlights 
cryptosystem and Cross-Layer Protocol. A 
global initial key distribution method based on 
public key certificate chain shall be presented. 
And also present a method for survivability 
strategy in mobile network. 

Keywords: 

Survivability, Mobile Network, Key Distribution 
Cross-layer protocol 

Introduction: 

Network survivability is considered to cope with 
increasing demand for reliable network system. 
Network survivability is an essential aspect of 
reliable communication service. Survivability 
consists not only of robustness against failure 
occurring due to natural faults. In mobile 
networks infrastructure element such as base 
station (BS), and base station Controller (BSC), 
wired links, and mobile switch centre(MSC), are 
employed to provide and maintain essential 
services, hence the operation interruption of a 
network component affects overall or partial 
network services . wireless access network have 



unique characteristics to support mobile users 
which can result in different survivability and 
security aspect [1]. There for wireless 
survivability strategies must be designed to 
improve the service available rate of the network 
component system [1-2]. 

Due to the mobility if node, the network 
topology is highly dynamic and all traffic suffers 
from frequent path breaks. The survivability of 
routing protocols of such networks must be able 
to perform efficiently and effectively. In this 
paper we propose a solution on traditional 
survivability strategy in mobile network. 
Survivability is a critical requirement for reliable 
services in any network. This paper highlights 
the challenge of providing Survivability. 
Over the years, cross-layer designs , which let 
two or more protocols from non-adjacent layers 
function in concert, have become very popular, 
since these tend to sacrifice generality for 
performance improvements. The two modularity, 
which provides flexibility in protocol update and 
specialization, which uses the specificities of a 
network to improve performance. 
Cross-layer designs may be best understood by 
explain in their opposite-layered scheme. The 
latter prevent communication between non- 
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adjacent layers in the protocol stack and limit 
interactions between two adjacent layers to 
function calls and returns. Cross-layer protocols 
violate these principles and use information 
available at two or more levels in the stack to 
improve the network performance and/or life 
time. 

At one extreme, the multiplication of cross-layer 
interactions within a protocol stack can lead to 
"spaghetti" designs, whereby the modification of 
one aspect in a protocol may have unforeseen 
consequences within many protocols. 
Mobile user authentication is very necessary 
when a mobile user wants to request service 
provided by the service providers survivable 
(SPS) in the visited domains. For the survivable 
the designing of an authentication survivability 
protocol (ASP) suitable for the mobile network. 
In this paper we present a survivability strategy 
in mobile networks method, by use of key 
distribution 

A network could be as simple a forum held in a 
city between people , where people use the 
opportunity of being communicate with each 
other, they use a network by use of key 
distribution has the potential for setup the 
survivability . Fundamental to distribute 
mechanics is the effect of measurement on a 
state. If some property of a general state is 
measured, it collapses to an eigenstate of the 
property and cannot be 'rebislt' in to the original 
state. Information can be encoded in to a general 
quantum state (GQS). 

In this way GQS defined by key distribution 
system. This paper is a survey of the issues, 
challenges and proposed research directions in 
survivability mobile network (SMN) resulting 
from our participation in the key distribution 
method and cross-layer protocol for survivable 
mobile network information set up. 

Survivability: - 

Traditional security research is primarily focused 
on the detection and prevention of intrusion and 
attacks rather than on continued correct 
operation while under attack. Fault tolerance is 
usually concerned with redundancy that is 
required to detect and correct up to a given 
number of naturally occurring faults. Nature is 
not malicious, and conventional failure model 
make significant assumptions, in particular, 
assuming faults to be independent and random, 
the presence of intelligent adversarial attacks can 
protocol vulnerability often become 



more important considerations in the presence of 
an adversary. 

There are a number of definitions of 
survivability. The one we use here is from the 
Software Engineering Institute, which 
emphasizes timeliness, survivability under attack 
and failure, and that detection of attack is a vital 
capability. 

Survivability is the capability of a system to 
fulfill its mission in a timely manner. Even in the 
presence of attacks or failures. Survivability goes 
demon security and fault. Tolerance of focus on 
delivery of essential service even when system is 
entered or experience failures. And rapid 
recovery of full service when conditions 
improve. Unlike traditional security measures 
that require central control and adminarstive, 
survivability address highly distributed 
unbounded network environment that lack 
central control and unified security policies. 

The Three Rs: Resistance, Recognition, and 
Recovery 

The focus of survivability is on delivery of 
essential services and preservation of essential 
assets. Essential service and asserts are those 
system capabilities that are critical o fulfilling 
mission objectives. Survivability depends on 
three key capabilities: resistance, recognition, 
and recovery. Resistance is the capability to 
detect attacks as they occur and to evaluate the 
extent of damage and compromise. Recovery, a 
hallmark of survivability is the capability to 
maintain essential service and asserts during 
attacks, limit the extent of damage, and restore 
full service following attack. 
We further extend this definition to require that 
survivability system be able to quickly 
incorporate lesion learned from failure, evolve, 
and adapt to emerging threats. We call this 
survivability feature refinement. 
We can classify survivable mobile wireless 
networking requirement into four categories 
based on [3]: (i) resistance requirement; (ii) 
recognition requirement; (iii) recovery 
requirements; and (iv) refinement requirement. 
We can also describe a requirement definition 
process [4]. This includes the definition of 
system and survivability requirement, legitimate 
and intruder usage requirement, development 
requirement, operation requirement, and 
evolution requirement. Essential service must be 
identified and specified for the penetration, 
exploration, and exploitation phases of the 
attack. 



46 



http://sites.google.com/site/ijcsis/ 
ISSN 1947-5500 



(IJCSIS) International Journal of Computer Science and Information Security, 
Vol. 12, No. 4, April 2014 



The approach has guided this work and is 
recommended for more detailed requirement 
analyses for future mobile wireless network. 
Ultimately, there are two distinct aspects of 
survivability that apply at all networking layers. 

Information access requirement: 

Does the user have access to the information or 
service required to complete the task in the 
presence of failure or attack? For e. g. it is 
possible to replicate service or information and 
provide them locally when the network gets 
partitioned? End - to- end communication 
should not be mandated in these cases. 

End- to- end communication requirement: 

On the other hand there are interactive 
application , inter- personal communication such 
as voice calls, or dynamically generated 
information such as current sensor data, which 
require true end - to - end connectivity . Do 
existing session survive? Can the user create new 
session to reach the intended communication 
end- point even in the presence of failures and 
attacks? This requires that the communication 
end - point themselves survive and that the 
communication end - points themselves survive 
and that the adversary must not be able to 
permantely partition the network. Furthermore, 
the adversary must not be able to permantely 
disable access to required services such as 
authentication, naming, resource discovery, or 
routing. 

Mobile Network Survivability: 

Existing work on survivability in the context of 
cellular telephone networks concentrates 
primarily on infrastructure survivability (for e.g. 
see the outage index metrics and does not 
consider adversarial attacks [5 -6]. However, they 
offer some insight on quantifying survivability 
and the role of network management tools. 
Networks are vulnerable during upgrades, 
especially those involving software [7] . 
Furthermore, rapid evolution leads to learning - 
cure problems as well as - over - concentration 
leads or service into single points of failure. This 
problem is exacerbated by deficits in network 
management tools to operate and maintain 
increasingly complex system. 
Architectural improvement applicable to mobile 
include the use of redundant networks . 



Base Station: 

In more environment, a cell that Is geographical 
region unit is geographical region unite is 
covered by the radio frequency of a base station. 
Each call is controlled by a BS which has a fixed 
connection to a BSC (or RNC). In mobile 
network infrastructure element such as base 
station controller (BSC), wired links and mobile 
switch centre (MSC) are employed to provide 
and maintain essential service,. Hence the 
operation interruption of a network component 
affects overall or partial network services. 

A radiation antenna is classified as omni 
directional and directional with an 
ommnidirectional antenna, a single frequency 
spreads out in all directions of 360 coverage. A 
cell is directional antenna with each different set 
channel. 

System State of Base Station: 

The BS system, including antenna parts , cannot 
provide partial or whole service function for 
coverage cell when single or more fatal failures 
occur in the BS system . in this paper, we 
consider that system failures are caused by key 
distribution method. For example by interrupt 
sequence mishandling, overall system operation 
falls into failure state because of unanticipated 
handled interruption to a component of the 
system. 

Key distribution frame work: 

In mobile computing environment , when a 
mobile host moves to the visited domain it needs 
to be authenticated by the current domain before 
gaining the service of the provider in the domain. 
If the mobile host requires the current visited 
domain to provide service it will need a shared 
key with current domain authentication server. 
An effective method is using the hybrid 
authentication server. An effective method is 
using the hybrid authentication method including 
shared key cryptographic (PKC) system. PKC 
can verify the identity of the owner of a public 
key certificate can verify the identity of the 
owner of a public key and avoid the attack of 
impersonation. It is impossible to take single 
public key certificate (SPKC) authority to 
disseminate the PKC in the interrupt .so a sable 
Hierarchical Public key distribution (HPKD) 
framework is presented. According to the scale 
of the mobile users, the number of the layer of 
the framework can be decided. Figure 1 is an 
example of framework. The top level node S Al 
is the root of the survivability certificate 
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authorities (SCA). These are n levels CA node in 
the hierarchical tree. 




Fig Frame work of Key Distributionure-1 

The distributing process of public key certificate 
(PKC) is described as follows: 

(1) SCAi Sends PK 1 , SC 2 to SCA2; 

(2) SCA2 Sends PK'llPK 2 , SC 2 IISC 3 to 
SCA3; 

(3) SCA3 

SendsPK'llPK^IPK^SC^ISC'lISC 4 to 
SCA 4 



(n-1) SCAni sends PK 1 
SC2IISC3IISC4II. . . .SCn 



IIPK 2 II...IIPK n "', 



(n) SCAn Sends PK 1 IIPK 2 II...IIPK nl IIPK", 
SC2IISC3IISC4I 

After the distributing process is performance the 
AS and user gain a certificate chain respectively. 

A network is connected if these are a path 
between every pair of nodes. And a network is 
biconnected if the toss of any one link leaves the 
network connected. by key distributed 
framework it is clear that if user is linked by 
SCAI then it is to important that every node 
connected by each other. 



call across-layer design proposal .cross-layer 
design refers to protocol design done by actively 
exploiting the dependence between protocols 
gain .this is unlike layering, where the protocols 
at the different layers are designs independently 
.Protocols can be designed by respecting the 
rules of the reference architecture. 

In a layer architecture, this would means 
SCA3 Vning protocols such that a higher-layer 
ocol only makes use of the services at the 
is being provide. 

SCAn 

cross-layer module: 

A key concept at the physical cross-layer is the 
capacity of survivability region. which 
characterizes a tradeoff between achievable 
capacities at different links for survivability. 
Consider a network with A, B and Cl as the link 
gain,power,noise,respectly. Denote Dj as the 
interference coefficient from link ki to the link 
k 2 .assume that each node has a power boudget 
Xmaj. thus the power control with a physical 
Cross-layer module interference model may be 
formulated as 

max L¥n 

¥ is dual variable. ¥ play a key role in 
coordinating the survivability networking layer 
demand and layer supply, 
n-capicity region at the physical cross-layer 

n=log ( 1 +SINR) for every k 2 E 

SINR=AB/IAB+C L for every L E 

Because of interference, the power control 
problem is a non convex optimization proble that 
is present physical cross-layer module[9] 
capacity approximitly. 
Conclusion: 

In this paper, we have proposed a scheme for 
mobile service use of BS system and key 
distribution and Cross-layer protocol.. The key 
distribution takes full in to account and the 
certificate chain is transferred in clear text, 
impeders can observe the home SCA controls 
And cross-layer protocol for many mobile host. 
When the mobile host gets to visited domain, it 
may get a survivability scheme. 



Cross-Layer Protocol: 

It is repeatedly argued that layered architectures 
are not suitable for mobile networks, to illustrate 
this point ,researchers usually present what they 
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Abstract:- The optimal and distributed 
provisioning of high through output in Mobile 
Ad Hoc Network (MANET) is a network 
consisting of a set of wireless mobile routers and 
Communication with each other. The Network 
Mobility(NEMO) for the traffic represents the 
moving behavior of directional antenna and 
mobile rooters. Use the Cross-layer protocol in 
ad hoc wireless network we can drastically 
improve the utilization through overlapping 
communication is the different direction for the 
traffic. This paper highilight the chalenge to find 
out a route of effect the cross-layer protocol for 
traffic-management in Ad Hoc wireless network. 
In present paper we propose mobility for traffic 
mamnement in Ad Hoc wireless network by use 
of theory of Cross-layer protocol. 

Keywords: -Ad hoc Network, Cross-layer 
protocol , Directional Antenna, Mobile Router, 
Network Mobility 

Introduction:- ad hoc networks are 

multiple wireless networks consisting of a large 
number of radio equipped nodes that may be as 
simple as autonomous sensors. These type of 
network are useful in any situation where 
temporary network connectivity is needed such 
as in disaster relief. A mobile ad hoc network 
(MANET), is a network comprising wireless 
mobile rooters (MRs) that communication with 
each other without centralized control. The 



dynamic of wireless ad hoc networks as a 
consequence of mobility and disconnection of 
mobile host. The MRs that are within each 
other's radio range can communication directly. 
Each mobile rooter's acts as host in MANET 
environment. Mobile rooters are free to join or 
leave the network at any point of time. 

Here we are working towards implementing 
wireless ad hoc community network 
(WACNEC) that was small, low cost directional 
antenna, known as ESTAR (Electronically 
Steerable passive Array Radiator) antenna, with 
each user terming [1,2]. Due to unreliability of 
wireless links, it has been of interest to study the 
impact of physical-layer techniques on the 
design including medium access 
control(M AC), packet scheduling, power control, 
routing, transport protocol, and ultimately the 
QoS at the application level in the wireless 
networks. 

Mobility system define rooter, movement 
patterns in ad hoc networks. Since MANETs are 
currently not deployed on are large scale and 
due to inherent randomness of mobility modes, 
research in evaluating the performance of 
routing protocols on various system of mobility. 
In this paper the performance of MANET for the 
effect of cross-layer protocol [3]. In[3],a cross- 
layer design approach is employed to improve 
the performance of combined cooperative 
schemes. The cross-layer information is minted 
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in a separated data structure and is shared among 
layers. 

Whatever may be routing scheme, they all rely 
on using Omni -directional antenna. The use of 
directional antenna to find out a route and use it 
in database has not been explored properly. Here 
we proposed Cross-layer protocol where each 
node keeps certain neighborhood information 
dynamically through the Maintenance of an 
Angle - SINR Table. 

For experimental purposes we have considered 
A framework to evaluate the impact of different 
mobility models on the performance of MANET 
routing cross-layer protocol is provides in [4] 
various protocol independent matrices are 
provided to capture interesting mobility 
characteristics restrictions. 

Mobility models:- The mobility model is 
designed to described the movement pattern of 
Mobility models used in the simulation study of 
MANET.: traces base model and synthetic base 
model [4]. The traces base model obtains 
determistic data from the real system. This 
mobility model is still in its early stage of 
research, therefore it is not recommended to be 
used. The synthetic based model is the 
imaginative model that used statics. The 
movement of each MN to its destination has a 
pattern that can be described by a statistical 
model that expresses the movement behavior in 
the real environment. 

The Framework: - 
Angle - SINR Table :- 

In order to make the directional routing 
effective, a node should know how to set its 
transmission direction effectively to transmit a 
packet to its neighbors. So each node 
periodically collects its neighborhood 
information and forms an Angle- SINR Table 



(AST). Sinu s m(t) (Signal - to - Interference 
and Noise Ratio) is a number associated with 
each link l u n, m, and is a measurable indicator 
of the strength of radio connection from node n 
to node m at an angle u with respect to n and as 
perceived by m at any point of time t. AST of 
node n specifies the strength of radio connection 
of its neighbors with respect to n at a particular 
direction . Angle - SINR Table for node n time t 
is shown below (Table I) where we assume that 
nodes I, j and k are the neighbors of n. 

TABLE I. ANGLE - SINR TABLE (AST)FOR NODE n 



Azimuth 
Angle 


SINR value as perceived by neighbors of 
rooters n at different angle w.r.t rooters n 




1 


j 


K 


(degree) 








0 


sinrV 11 


SINRVj 141 


SINRVf 


30 


SINR^n/ 1 


SINR^n/ 1 


sinrV 


60 


SINR 60 n,i (t) 


SINR 60 n,j (t) 


SINR 60 n/» 










330 


S\NR 33 \\ it} 


SINR 330 n/' 


SINR 33 ^/ 1 


360 


S\NR 36 \\ it} 


SINR 360 n/' 


SINR 36 ^/ 1 



In order to form AST, each node periodically 
sends a directional request in the form of a 
directional broadcast, sequentially in all 
direction . in this work it has been done 30 
degree interval, covering the entire 360 degree 
space sequentially. A node is i in the 
neighborhood of n will wait until it receives all 
the request packets generated by n in all 
direction in that occasion. In others word, node I 
accumulates the entire column of the AST of n 
for node I, I accumulates the entire column of 
the AST of n for rooters i. Here, rooters i, after 
receiving the first request from n, has to wait a 
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pre-specified amount of time to make sure that 
the directional broadcasts by n in all direction 
are over. Rooters I sends this information from 
all the neighbors of n, the Angle-SINR Table of 
n would be complete. 

Omni transmission both transmission range and 
spatial reuse can be substantially enhance by 
having nodes concentrate transmitted energy 
only towards their destination direction, thereby 
achieving higher signal to noise ratio. 

When there is a need to utilize only the 
directional characteristic, the demands are more 
since this is possible only when the rooters 
which wants to transmit and the rooters which 
wants to receive are synchronized with their 
respective related modes(i.e.) one rooters is in 
the transmit rooters and other is in the transmit 
mode and other is in the receive mode and are 
pointing towards each other as shown in figure 
1. 

If xi = 60°, X2= 120°, X3= 180°, X4 = 240°, 
Xs= 300°, xe= 360° then 




Figure : Basic mechanism for receive Mode and 
transmit Mode. 

This is the most important task of any Cross- 
layer protocol for Mobile Network is to identify 
the set of non - interfering transmissions is an 
area and to coordinate the activities of the 
various senders. As we discussed above, the 
notion of non- interfering transmissions depends 



on the antenna orientations of the senders. Thus, 
an indoor directional Cross-layer protocol must 
not only identify the set of possible concurrent 
transmissions but also determine their 
orientations. Directional antenna has the 
potential to provide the necessary interference 
reduction by spatially confining transmission. 



CROSS-LAYER PROTOCOL: 

It is repeatedly argued that layered architectures are 
not suitable for mobile networks, to illustrate this 
point ,researchers usually present what they call 
across-layer design proposal .cross-layer design 
refers to protocol design done by actively exploiting 
the dependence between protocols gain .this is unlike 
layering, where the protocols at the different layers 
are designs independently .Protocols can be designed 
by respecting the rules of the reference architecture. 

In a layer architecture, this would means 
designing protocols such that a higher-layer protocol 
only makes use of the services at the sevice is being 
provide. 

Physical cross-layer module: 

A key concept at the physical cross-layer is the 
capacity of survivability region, which characterizes 
a tradeoff between achievable capacities at different 
links for survivability. 

Consider a network with A, B and C L as the link 
gain,power,noise,respectly. Denote Dj as the 
interference coefficient from link ki to the link 
k 2 . assume that each node has a power boudget X max . 
thus the power control with a physical Cross-layer 
module interference model may be formulated as 

max L¥n 

¥ is dual variable. ¥ play a key role in coordinating 
the survivability networking layer demand and layer 
supply. 

n-capacity region at the physical cross-layer 

n=log ( 1 +SINR) for every k 2 E 

SINR=AB/IAB+C L for every L E 

Because of interference, the power control problem is 
a non convex optimization proble that is present 
physical cross-layer module[9] capacity 
approximitly. 
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CONCLUSION: - In this paper we use the 
Cross-layer protocol and directional antenna to 
find out a route optimization and we also present 
the effect of the Cross-layer protocol for traffic 
management in Ad Hoc wireless network. And 
we propose a system of traffic management in 
Ad Hoc wireless network by use of theory of 
directional antenna. 
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Abstract :- 

Over the Recent years a considerable 
amount of effort has been devoted 
towards the traffic management and root 
is the important capability to provide 
best network technology in today's 
world. Present paper we study the traffic 
management for mobile networks and 
we addresses current issue of the traffic 
management. Present the performance 
of Mobile Network by using Cross-layer 
protocol. 

Index Terms :- 

Mobile Networks, call admission 

control, QoS (Quality of Service) .rout 

optimization 

1. Introduction :- 

Over the recent years a considerable 
amount of effort has been devoted 
towards the performance, evaluation for 
the traffic management of wireless 
mobile networks of wireless mobile 
networks (WMN). A considerable 
amount of research efforts has been used 
to characterize user and calling behavior 
and their performance impact on 
wireless mobile networks. At present the 
mobility in most mobile in most mobile 
networks is confined to the end users 
only. 

With the development of mobile 
compfor the devolopement of traffic 
management the call admission schemes 
are ganarely adopt[l] mobile user 



authentication is absolutely nessesary as 
mobile user want to request service 
provided by the provide survival in the 
visited traffic management a networks 
could as simple as of forum held in a 
city , state ,country , whole world between 
the people . where people 
communicating with each other[2] .the 
system may need to block inas a mobile 
user ression the CAC schemes are 
generally adopted by setting thresholds 
for hand off calls and new call 
differently given the traffic condition 
and it is the maximum number of users 
that can be supported. The system may 
need to block incoming users if all of the 
entire band width has been used up to 
provide the highest QoS to existing 
users. However if these existing users 
can be degraded to a lower but 
acceptable QoS level, it is possible to 
reduce the blocking probability without 
degrading the QoS of existing users. A 
graceful degradation mechanism is 
proposed in [3]. Thus a system could 
free some bandwidth allocation for new 
users. In this paper we address current 
issues in traffic management for cellular 
mobile networks. In traffic management 
coming user that can be supported .the 
system may need to block incoming user 
and congestion control, courcoubetis and 
series device new procedures and tools 
for the analysis of network traffic 
measurement. 
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2. MODEL DESCRIPTION:- 



We consider uplink communication in a 
wireless mobile networks. As an 
accepted call does not always send data 
frames. Then for best traffic we consider 
the activity factor £ as the 

probability that a call is active. We 
represent QoS requirement of traffic by 
required transmission rate. The required 
transmission rate can be obtained by 
setting the target level. 
Often these intra - and inter -traffic 
interferences of call can be large so that 
the target bit error rate of traffic 
interferences(BERIT) can not be 
achieved temporarily, which is called 
outage. The outage probability needs to 
approach zero as close as possible and 
can be different for each class. Here we 
assume for traffic management the 
allowed outage probability is the same. 

3. OUTAGE PROBABILITY FOR 
TRAFFIC:- 

In a mobile network a traffic 
management the supports a single class 

of calls, the outage probability is given 
by [2]. 

Pout = Pr {N a + M% (3/2) G(x 1 - (Yb/NoV'} (1) 

When N a , M a , G, X, Y b , and No 
represent the number of active calls in 
the current call, similarly in a network 
that support L-Class of calls, we obtain 

L a 

Pout = Pr { 2_, (Ybi / Yb j) Ci (Ni +Mi ) > Aj } 

i=l 

L 

=Pr { 0\ (Ni a +Mi 3 ) > 77 j } (2) 

i=l 

When i, j represent traffic call classes 
(TCC), Ci is the number of orthogonal 
codes needs for a TCC, 'i'. By the 



Gaussian random variable from the limit 
theorem and we can write control the 
outage probability of a TCC 'j'. As 

Pout =Q(77j- XldX ) (3) 

Where Q(£) = l/ ■<[ 2n J e" x 12 dx 

f 

And represent the total traffic receive 

L 

single power (TRSP) i.e. ^ 6>i 

i=i 

a a 
(Ni +Mi ) 

— L — a 

Therefore X = (1+fl) ^ 01 N i, (4) 

;=l 

And d 2 l = Y 4 0 2 l(di 2 + f2N a i) 

(=l 

Q ^ 

Where iV i and d I indicate the mean and 
a 

variance of N I. 

According to the assumption of TCC 
equal outage probability for each class 
we can r/ 1 = r/ , for all I and j . there for 
TCC received single power meets the 
following relation. 

6\ l0\ = CiXi (3G - 2CjXj) // / CjXj(3G+ 
2CiXj) (6) 

This indicates that the power allocation 
refers the target of TCC outage 
probability. 

Call Admission Control (CAC): 
System Model :- 

The Communication system under 
consideration can be defined as 

L 

rM=^ h[i]&[k-i] + z[k] (7) 

i=0 

Where r [k] received call sequence 
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h [1] unknown channel for traffic with 
memory L', z [k] is an independent and 
identically distributed Gaussian notice 
sequence. 

Then traffic management symbol 
sequence s [k] is drawn from M-ary 
alphabet, A with equal probability, the 
vector version of (1) can be written as 



r[k] 




~S[K-L] . 


■ S[K] ' 




'h[l]~ 


r[l] 




SW-L] . 


■ S[l] 




h[l] 


r[0]_ 




. S[-L] . 


■ S[0] _ 




h[0]_ 



z[k] 



z[l] 
z[0] 

Where Sk is toeplitz data matrix. 

Call Admission Control for 
Traffic Management: - 

For call Admission Control for traffic 
Management [CACTM] the outage 
Probability is very small defined as 

— < 0 we can show that 

dt] 

BP 8P 

— °JtL = a ^tL>0 where a, is the 
dN i dN t 

active factor for (CACTM) a class I call. 
It is clear that the average rate for mobile 
network [ARRMN] and outage 
probability increase with the number of 
users. Call admission control is a 
mechanism used in networks to 
administer quality of service (QoS). 
Whereas the CAC problem in time 
division multiple access (TDM A) based 
cellular networks is simply resalable to 
the number of physical channels 
available in the network, it is strongly 



related to the physical layer performance 
in WCDMA networks since the multi- 
access interference in them is a function 
of the number of users and is a limiting 
factor in ensuring QoS. The CAC 
mechanism will thus rely on the "Soft 
Capacity" of the W- CDMA networks as 
determined by the level of multi-access 
interference, often characterized by the 
signal to interference ratio. In such 
systems the CAC design leads to a 
significant interaction between the 
physical and medium access control 
layers. 

Any given networks have a finite 
resource that is the number of node, 
links and buffers and the bandwidth are 
finite. Thus there are maximum numbers 
of packets that can be in a network at 
any given time. Although there is 
consideration related to the economics of 
network that favors operating at or close 
to full capacity there are other 
considerations 

Related to QoS that provide impacts to 
operating at less then full capacity. 

The higher the packet 
traffic in a network or part of a network, 
the greater the average delay per packet 
due to the limited resources, i.e. if there 
are more packets the Qos is lowered. 
Thus in order to maintain QoS the 
number if calls is to be limited. 
Rejection if calls create a perception in 
customer mind regarding provides 
inability. End to end all problem faced 
by the network is one od the measuring 
and forecasting QoS, maximizing call 
blocking probability and maximizing 
throughput while maintaining QoS. 

The typical parameters that 
must be managed are latency, filter, 
bandwidth and packet loss rare [1], [2]. 
Packet loss is mainly due to buffer 
overflow packet corruption can occur, 
this is erroneous reception of nits due to 
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physical layer impairments. A highly 
loaded network affords less loss of 
overloaded of overcrowded buffers. 
Light loading can also reduce end to end 
delay and in wireless network based on 
W-CDMA protocols, lower packet 
corruption caused by interference. QoS 
proves coming refers to network 
capability to different classes of traffic to 
implement QoS proves coming, a 
desired QoS is negotiated between the 
customer and the network on each call 
and the network QoS parameters are set 
accordingly. 

Physical layer issue are an essential 
components of QoS management in 
wireless network, especially with mobile 
with platforms as varying channels 
condition and number of users directly 
affect reliability of communication. Thus 
QoS schemes must potentially integrate 
functions at the physical and medium 
access control (MAC) layers. 

CAC has emerged as one key 
component of such schemes [3]. 



Numerical Result :- 

We now compare the performance of the 
consider two CACs through numerical 
analysis. The system bandwidth is 
2.50(MHz) and each code can carry 
information bits at the rate of 19.2(kbps) 
so that the processing gain is 256. Two 
types of calls are considered to manifest 
the effect of traffic parameters on 
performance. Class 1 and 2 calls are 
voice traffic and we set their 
transmission rates after channel coding 
at 19.29(kbps). They have different 
Mobile Network Average Revenue Rate 

(MNARR) for the traffic management 

-4 -6 
requirement of less than 10 and 10 , 

respectively, and their activity factors 

are set at 1.0. The coefficient for 



intercall interference modeling are 
chosen as fl = 0.114 and f2 = 0.44[12]. 

CONCLUSION: 

In this paper, we consider Call 
Admission Control for Traffic 
Management [CACTM] in Mobile 
Networks. Through the mathematical 
analysis and also present outage 
probability and a system model's for 
CAC and we also present an example for 
Call Admission Control for Traffic 
Management [CACTM]. 
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Abstract— Anonymity has become a significant issue in 
security field by recent advances in information technology 
and internet. The main objective of anonymity is hiding and 
concealing entities' privacy inside a system. Many methods 
and protocols have been proposed with different anonymity 
services to provide anonymity requirements in various fields 
until now. Each anonymity method or protocol is developed 
using particular approach. In this paper, first, accurate and 
perfect definitions of privacy and anonymity are presented 
then most important problems in anonymity field are 
investigated. Afterwards, the numbers of main anonymity 
protocols are described with necessary details. Finally, all 
findings are concluded and some more future perspectives are 
discussed. 

Keywords-anonymity; privacy; online security 



I. INTRODUCTION 

Utilization of computer networks has been raised in recent 
years especially internet has become the most famous 
computer network in all over the world. While we are 
sending email or talking to our family members through 
internet, a lot of data or information packets are sent 
through internet. These packets consist of information of 
sender and receiver and etc. Since the packets are 
transmitted by several hops, everybody can monitor them 
and access to various information such as who started the 
contact and with whom and some other useful information. 
Although it is possible to conceal packet contents from a 
viewer by cryptography, the information of IP header is 
still accessible for a viewer. For this reason, in two past 
decades, some improvements have been emerged about 
anonymity and preserving privacy in formal and public 
communication field. So far, several systems have been 
designed and such systems are using by military groups, 
journalist and public sections. These systems are used to 
hide identities in virtual internet world .Today, there are 



various applications which need some methods to provide 
anonymity for performing their particular tasks. Some 
examples of these applications could be electronic voting, 
electronic commerce and etc.[l] Anonymity can be a 
branch of preserving privacy but preserving privacy is a 
concept wider than keeping anonymity of entities. 
Anonymous communication give a possibility to have 
contacts without disclosing their identities and it does not 
contain all aspects of privacy. Indeed, anonymity try to 
conceal operation agents' information while preserving 
privacy also hides whatever they perform [1]. 

Ignoring anonymity aspects causes to jeopardize people 
privacy. Hence, anonymity is one the most important issues 
in information security and preserving people privacy. So 
many applications need anonymity practically. In [3, 4, 5] 
these applications were categorized as follows: 

• Searching information anonymously 

• Maintain communication patterns to prevent 
traffic analysis 

• Providing freedom of speech in fanatic 
environments 

• Electronic voting 

• Anonymous using of location based services 

• Electronic payments 

• Electronic cash 

• Anonymous web browsing 

• Anonymous e-mail 

• Anonymous publishing 

Anonymity attributes and also the level of anonymity are 
different in various applications. Therefore, analyzing of 
anonymity requirements which are used for determining 
accurate anonymity features in a service are very important 
and they must be done with high accuracy. For instance, 
applying a complete level of anonymity is not mostly a best 
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choice because it causes some problems in many systems. 
There is no ability to follow and pursue entities in a 
complete anonymous system while the capability of 
imputing operations and attacks to people or entities in the 
system gives a possibility to hamper people's wrongdoings 
[2]. Consequently, anonymity must be applied with respect 
to the organization completely or under some particular 
conditions. 

II. PRESERVING PRIVACY, ANONYMITY 

Information is a lifeline in the most institutes, developed 
organizations and scientific communities. In the institutes 
and organizations in which information is really important, 
a quick and proper way is necessary to access to 
information. Organization and institutes should create 
informatics infrastructure and try to organize their 
information. One of success keys in institute, organizations 
and scientific communities in information age is speeding 
to generate and offer worthwhile information. After 
organizing information, it is necessary to provide regular 
and correct use of this information for others. Along with 
moving to developed organization based on information 
technology, it is essential to plan some other methods for 
preserving information. 

Information security points to preserve information and 
minimize information revealing risks in unauthorized parts. 
Information security is a set of tools for preventing thefts, 
attacks, crimes, espionage and sabotages and etc. it is a 
science for studying various approaches to preserve data in 
computers and communication systems against access to 
unauthorized changes. Preserving privacy could be a 
subcategory of information security. Privacy means such a 
person can separate his/her information and disclose them 
on others view by his/her choice. Everyone has some 
private information which wants to keep them from others. 

HI. ANONYMITY ISSUES 

Today, providing anonymity approaches are considered 
specially preserving entities' privacy in electronic 
commerce and electronic voting and etc. As it is mentioned 
before, content of messages could be protected by 
cryptography methods but message rout, source and 
destination of message, sending time, message length and 
some kind of information would still remain. Sometimes, 
valuable information can be accessible only by observing 
people communication pattern. Access to entities' 
information in a communication would be a violation of 
their privacy and anonymity can prevent revealing of this 
kind of information. Accordingly, anonymity can be a 
branch of information security [1]. 



Nowadays, there are a lot of applications that need 
anonymity and each application requires special anonymity 
attributes. For example imagine an electronic payment 
system that users can search their items and select and buy 
them. Most customers do not like to show their identity and 
their private information like interests and preferences. 
Thus, besides concealing users' identity connection 
between users' different operations must be hided. 
However, customers' anonymity should be applied in a 
limited way to preserve authority of trades correctly. It 
means that in electronic payment system, anonymity must 
be applied a different way. When an entity makes a 
wrongdoing, it would be possible to remove its anonymity 
and expose its real identity. As a matter of fact, the ability 
of imputing responsibility of operation to people gives a 
possibility to hinder crime activities in system by ordaining 
some rules and politics [2]. 

On the contrary, suppose an online medical consultation 
such that gives consultation to patients by hiding patients' 
identities. Since patients' backgrounds have very serious 
role in correct consultation, hiding information can 
damages system operation. Consequently, unlike electronic 
payment covering users' background might destroy 
accuracy of disease detection in a medical system. 

Several protocols were proposed to provide anonymity in 
applications until now. It is necessary to have an organized 
method for developing software security because existence 
of this kind of method gives a capability to users for 
analyzing and describing application requirements. 
Therefore, it can reduce complexity of software analyzing 
and designing. Furthermore, it can save cost and time 
because it can recognize and move system problems in 
initial phase of software development. 

VI. ANONYMITY PROTOCOLS 

Anonymous communication means the communication 
layer must not reveal potentially identifiable information 
such as the user's IP address or location. This can be met 
by so-called anonymity protocols such as mix networks 
[6], onion-routing systems [7]. 

A. Mix-Net Protocol 

The Mix-Net protocol is the base for some other anonymity 
protocols, Web Mixes [8], ISDN-Mixes [9], and Stop-and- 
Go-Mixes [10], to name a few. This protocol uses some 
nodes, called Mix, between sender and receiver. Mixes act 
as mediators for sending messages and provide the 
anonymity of the sender against the receiver. Moreover, 
Mixes are used for hiding a connection against attacks. 
Figure 1 shows this protocol. 
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Mix(n) 




Mix(n-l) 




Mix(l) 



Receiver 



Figure 1: Mix-Net Protocol [11] 

In the first step of executing the protocol, the sender 
defines a sequence of mixes. This can be accidentally or 
contractually. In this case it supposed the defined sequence 
is static. Then the sender encodes its message (M) by using 
the general key (Ki) of mixes. The sender adds the 
receivers address (AR) to the encoded message of last mix. 
The form of message is shown below: 



Kn(Rn,(Kn-l(Rn-l, 
AR))...) 



K2(R2, K1(R1, Ka(R0, M), 



In message form, there is a random number (Ri) besides of 
each encoded part. Therefore, before encoding the sender 
adds a set of random bits besides each part and this 
prevents the data from dictionary attack. 

The important point in mix-net protocol is that even if one 
mix stay safe against traffic analyzing attack, the 
connection between sender and receiver will stay safe, 
because there is no relationship between the input and 
output of each mix [12, 13, 14]. 

B. Onion Routing Protocol 

In the Onion-Routing protocol, the sender and receiver can 
identify each other. The basic goal of this protocol is to 
make an anonymous connection from others' viewpoint, 
and to prevent network traffic analysis. This protocol uses 
a group of computers named Onion Routers. When a user 
has a request for sending a message, first the user considers 
a sequence of Onion Routers, then, makes a data for each 
router and uses layer encoding with general key encoding 
to preserve every router's data from other routers [15]. 

Each node peels a layer of onion, and this means the node 
decodes the information with its own private key that is 
related to itself and sends the result to next routers. After 
finishing this process of peeling a rout of onion routers is 
created between sender and receiver that can have an 
anonymous connection. According to this explanation the 
onion routing protocol creates a two-sided real-time 
connection between sender and receiver. 



anonymity for different applications are different, and in 
many of the applications anonymity should be applied in a 
controlled and conditional manner. The concept of 
conditional privacy preservation has been widely studied in 
vehicular communications especially in VANETs [16]. The 
works in [17-20] are number of proposed methods to 
achieve conditional privacy. 

Naessens et al. in [21, 22] introduced a methodology for 
designing controlled anonymity systems. This 
methodology defines four categories of requirements: 
Anonymity requirements, controlled requirements, 
applicability requirements and trust requirements. In their 
methodology, anonymity requirements come in a graph 
like "Unlinkable(X, Y)" which is called Linkability graph. 
In this system X and Y can be any kinds of operations or 
features. This graph shows for doing any operations what 
features needed to be accessed and what privileges will be 
required. Moreover, the proposed methodology uses Petri- 
Nets to represent the sequence of operations in a system. 
For each operation, it defines what kind of privileges will 
be required, when the operation will be finished, and what 
kind of privileges we will gain. The most important issue 
regarding this methodology is that it is not possible to 
consider all anonymity requirements from all aspects and 
put them into Unlinkable forms. Moreover, in this 
methodology there is no approach for detecting entities that 
might try to break the system rules. 

Kavaki et al. in [23] proposed a methodology named Pris 
for considering privacy requirements in software 
development process. It is a Goal-Oriented methodology 
and defines the requirements as goals. The conceptual 
model that is used in Pris comes from Enterprise 
Knowledge Development framework that is shown in 
Figure 2. In this methodology, to reach the goals, they are 
divided into sub-goals until it is possible to reach each goal 
with a process. There exist several issues about this 
methodology; it divides all requirements (goals) into two 
categories: organizational goals and privacy goals which 
are too general. There are many applications with 
anonymity requirements, and these requirements are very 
different in each application; hence, sometimes considering 
the requirements in the form of such goals is not possible. 



V. PREVIOUSE WORKS ON CLASSIFICATION 
ANONYMITY REQUIREMENTS 

These days, anonymity and preserving privacy are 
becoming very important issues in the digital world [5]. As 
a matter of fact, the requirements and the level of 
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Unobservability 



Figure2: PriS conceptual model [23] 

As well as, Giirses et al in [24] proposed a methodology 
named CREE for Confidentiality Requirements Elicitation 
and Engineering which is applied to a real world project in 
the health care area. However, this work as stated by the 
authors is a primary effort and is also limited to the 
confidentiality and do not cover the anonymity concerns. 

De Win et al. in [5] proposed a categorization for 
anonymity. In this categorization, they explained three 
features of anonymity such as traceability, linkability, and 
identifiability. They also proposed some combination of 
these features for any application that needs to be 
anonymous. For example if an entity is not traceable, 
linkable and identifiable, this entity is not anonymous, but 
if this entity is untraceable, unlinkable, and unidentifiable, 
it has the complete level of anonymity. In this approach the 
different combinations of these features make different 
levels of anonymity. Although this categorization is better 
than other works in this area but, this categorization is not 
complete enough, because they just consider some features 
of entities which mostly are related to the messages of 
entities or the connection between those entities. However, 
in this categorization they do not consider the features of 
entity itself which is selected to be anonymous. 

TABLE I: DIFFERENT KINDS OF ANONYMITY [10] 
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Linkability 


Identifiability 


Anonymity 
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Spikerman and Cranor in [25] tried to offer a holistic view 
of privacy engineering and a systematic structure for the 



discipline's topics. They have used a three-layer model of 
user privacy concerns to relate them to system operations 
(i.e. data transfer, storage, and processing) and examine 
their effects on user behavior. Furthermore, they have 
developed guidelines for building privacy-friendly systems. 
An interesting result of [25] is that they have shown the 
degree of privacy friendliness of a system is inversely 
related to the degree of user data identifiability. However 
the levels of identifiability in [25] is limited to three levels: 
identified, pseudonymous, and anonymous. 

VI. CONCLUSION 

We live in electronic society and thus many of us read 
online news, manage online back account, buy online and 
chat with friends every day. Since we spend a lot of our 
daily time on the internet, anonymity treats are rising 
extremely. Storage memories are inexpensive; hence, the 
information of our activities can be saved and marinated 
with very low cost. Fortunately, a lot of efforts have been 
performed to preserve users' privacy and to anonymize 
users' communications in cyberspace up to now. The 
numbers of these existence anonymity protocols and 
methods with different approaches were studied in this 
paper. An accurate Knowledge of anonymity requirements 
in the system could be helpful to develop more secure and 
utilizable software and to have more safe online 
communication in the future. 
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